CVE-2026-40462 — iControl REST and tmsh vulnerability

CVE-2026-40462

iControl REST and tmsh vulnerability PUBLISHED

Description (CNA)

Incorrect permission assignment vulnerabilities exist in iControl REST and TMOS shell (tmsh) undisclosed command which may allow an authenticated attacker to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected (CNA)

Vendor / product	Versions
F5 / BIG-IP	unaffected 21.1.0 before ; affected 21.0.0 before 21.0.0.1; affected 17.5.0 before 17.5.1.4; affected 17.1.0 before 17.1.3.1; affected 16.1.0 before

CWE

CWE-732

References

https://my.f5.com/manage/s/article/K000156581

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.