CVE-2026-63020 — BIG-IP Configuration utility vulnerability

Description (CNA)

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility web browser session. This is a control plane issue; there is no data plane exposure. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected (CNA)

Vendor / product	Versions
F5 / BIG-IP	affected 21.1.0 before 21.1.0.1; affected 21.0.0 before 21.0.0.3; affected 17.5.0 before 17.5.1.8; affected 17.1.0 before 17.1.3.4

CWE

CWE-451

References

https://my.f5.com/manage/s/article/K000161728

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.