Known Vulnerabilities for Big-ip Domain Name System by F5

Listed below are 10 of the newest known vulnerabilities associated with "Big-ip Domain Name System" by "F5".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-105679 json Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploa... Not Provided 2026-10-05 2026-10-05
CVE-2026-105651 json Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-... Not Provided 2026-10-05 2026-10-07
CVE-2026-105649 json Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a n... Not Provided 2026-10-05 2026-10-06
CVE-2026-105644 json Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored wit... Not Provided 2026-10-05 2026-10-06
CVE-2026-104082 json SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scope... Not Provided 2026-10-09 2026-10-14
CVE-2026-102700 json With its original introduction, GNTTAB_cache_flush was made available uniformly. XSA-232 (CVE-2017-14318) then covered an om... Not Provided 2026-10-13 2026-10-20
CVE-2026-94235 json The MemberHero WordPress plugin through 6.9 does not perform any capability or nonce check on one of its AJAX actions, allow... Not Provided 2026-10-11 2026-10-11
CVE-2026-89795 json In the Linux kernel, the following vulnerability has been resolved: PCI: Allow per function PCI slots to fix slot reset on s... Not Provided 2026-09-16 2026-10-19
CVE-2026-89107 json SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition function... Not Provided 2026-10-13 2026-10-14
CVE-2026-85990 json Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plu... Not Provided 2026-10-13 2026-10-16

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationF5Big-ip Domain Name System9.2.2
ApplicationF5Big-ip Domain Name System16.0.1.1
ApplicationF5Big-ip Domain Name System16.0.1
ApplicationF5Big-ip Domain Name System16.0.0
ApplicationF5Big-ip Domain Name System15.1.2
ApplicationF5Big-ip Domain Name System15.1.1
ApplicationF5Big-ip Domain Name System15.1.0.5
ApplicationF5Big-ip Domain Name System15.1.0.4
ApplicationF5Big-ip Domain Name System15.1.0.3
ApplicationF5Big-ip Domain Name System15.1.0.2
ApplicationF5Big-ip Domain Name System15.1.0.1
ApplicationF5Big-ip Domain Name System15.1.0
ApplicationF5Big-ip Domain Name System15.0.1.4
ApplicationF5Big-ip Domain Name System15.0.1.3
ApplicationF5Big-ip Domain Name System15.0.1.2
ApplicationF5Big-ip Domain Name System15.0.1.1
ApplicationF5Big-ip Domain Name System15.0.1.0.48.11
ApplicationF5Big-ip Domain Name System15.0.1.0.33.11
ApplicationF5Big-ip Domain Name System15.0.1
ApplicationF5Big-ip Domain Name System15.0.0

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report