F5 F5OS

productDE

cpe:/o:f5:f5os:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

by severity

4critical263high867medium1low

updated 2026-10-26

vulnerabilities (1,923)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-53266US	—OT critical	0.83% (57th)	KEV	no fix	2026-06-25	—
CVE-2026-53362US	—OT critical	0.71% (53rd)	KEV	no fix	2026-07-04	—
CVE-2025-53521US	—OT critical	2.30% (83rd)	KEV	no fix	2025-10-15	—
CVE-2026-43500US	high7.8	2.62% (85th)	Exploit	no fix	2026-05-11	—
CVE-2026-53359US	—	0.98% (62nd)	Exploit	no fix	2026-07-04	—
CVE-2026-31717US	—	0.60% (48th)	Exploit	no fix	2026-05-01	—
CVE-2026-52924US	—	0.53% (44th)	Exploit	no fix	2026-06-24	—
CVE-2026-52993US	—	0.40% (34th)	Exploit	no fix	2026-06-24	—
CVE-2026-53264US	—	0.25% (15th)	Exploit	no fix	2026-06-25	—
CVE-2026-53360US	—	0.24% (15th)	Exploit	no fix	2026-07-04	—
CVE-2026-53075US	—OT elevated	0.22% (12th)	Exploit	no fix	2026-06-24	—
CVE-2025-60013US	—	0.18% (7th)	Exploit	no fix	2025-10-15	—
CVE-2026-53361US	—	0.18% (7th)	Exploit	no fix	2026-07-04	—
CVE-2026-31694US	—	0.18% (7th)	Exploit	no fix	2026-05-01	—
CVE-2026-31720US	high7.8	0.18% (7th)	Exploit	no fix	2026-05-01	—
CVE-2026-63828US	—	0.17% (6th)	Exploit	no fix	2026-07-19	—
CVE-2026-46215US	—	0.17% (6th)	Exploit	no fix	2026-05-28	—
CVE-2026-52923US	—	0.17% (6th)	Exploit	no fix	2026-06-24	—
CVE-2026-31721US	medium5.5	0.16% (5th)	Exploit	no fix	2026-05-01	—
CVE-2022-23218US	critical9.8	5.26% (93rd)	—	no fix	2022-01-14	—
CVE-2022-23219US	critical9.8	4.69% (92nd)	—	no fix	2022-01-14	—
CVE-2021-4189US	medium5.3	3.41% (89th)	—	no fix	2022-08-24	—
CVE-2023-27534US	high8.8	2.44% (84th)	—	no fix	2023-03-30	—
CVE-2023-27533US	high8.8	2.16% (82nd)	—	no fix	2023-03-30	—
CVE-2023-27537US	medium5.9	1.90% (80th)	—	no fix	2023-03-30	—
CVE-2023-27535US	medium5.9	1.80% (78th)	—	no fix	2023-03-30	—
CVE-2023-27536US	medium5.9	1.76% (78th)	—	no fix	2023-03-30	—
CVE-2023-27538US	medium5.5	1.45% (73rd)	—	no fix	2023-03-30	—
CVE-2025-54755US	medium4.9	1.19% (68th)	—	no fix	2025-10-15	—
CVE-2026-42009US	—	1.13% (66th)	—	no fix	2026-05-18	—
CVE-2026-33846US	—	1.12% (66th)	—	no fix	2026-05-04	—
CVE-2026-63913US	—	0.97% (62nd)	—	no fix	2026-07-19	—
CVE-2026-5260US	—	0.95% (61st)	—	no fix	2026-05-26	—
CVE-2026-42010US	critical9.8	0.94% (61st)	—	no fix	2026-05-07	—
CVE-2026-3832US	—	0.93% (60th)	—	no fix	2026-04-30	—
CVE-2026-42015US	—	0.92% (60th)	—	no fix	2026-05-26	—
CVE-2026-3833US	high7.4	0.89% (59th)	—	no fix	2026-04-30	—
CVE-2026-33845US	critical9.1	0.89% (59th)	—	no fix	2026-04-30	—
CVE-2026-46177US	—	0.81% (56th)	—	no fix	2026-05-28	—
CVE-2026-46102US	—	0.81% (56th)	—	no fix	2026-05-27	—
CVE-2026-43057US	—	0.81% (56th)	—	no fix	2026-05-01	—
CVE-2026-63888US	—	0.78% (55th)	—	no fix	2026-07-19	—
CVE-2026-63887US	—	0.78% (55th)	—	no fix	2026-07-19	—
CVE-2026-53176US	—	0.76% (55th)	—	no fix	2026-06-25	—
CVE-2026-52958US	—	0.73% (54th)	—	no fix	2026-06-24	—
CVE-2026-46037US	—	0.73% (54th)	—	no fix	2026-05-27	—
CVE-2026-59843US	—	0.73% (54th)	—	no fix	2026-07-21	—
CVE-2026-53046US	—	0.72% (53rd)	—	no fix	2026-06-24	—
CVE-2026-53003US	—	0.72% (53rd)	—	no fix	2026-06-24	—
CVE-2026-46027US	—	0.72% (53rd)	—	no fix	2026-05-27	—

showing 50 of 1,923

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free317 CVEs
CWE-476NULL Pointer Dereference250 CVEs
CWE-20Improper Input Validation242 CVEs
CWE-401Missing Release of Memory after Effective Lifetime207 CVEs
CWE-125Out-of-bounds Read195 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')141 CVEs
CWE-787Out-of-bounds Write141 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer94 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)1,923 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan