F5 F5OS

Name: F5 F5OS
Brand: F5

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical3high0medium1low

updated 2026-10-27

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-2586US	high7.8OT critical	10.2% (96th)	KEV	no fix	2024-01-08	2 versions
CVE-2021-23839US	low3.7OT elevated	2.96% (87th)	—	no fix	2021-02-16	≤ C <1.3.0
CVE-2026-33845US	critical9.1	2.07% (81st)	—	2.0.0-HR1	2026-04-30	< 2.0.0-HR1
CVE-2026-42009US	—	1.33% (71st)	—	2.0.0-HR1	2026-05-18	< 2.0.0-HR1
CVE-2022-2585US	high7.8	1.28% (70th)	—	no fix	2024-01-08	2 versions
CVE-2026-33846US	—	1.26% (70th)	—	2.0.0-HR1	2026-05-04	< 2.0.0-HR1
CVE-2026-42010US	critical9.8	1.05% (64th)	—	2.0.0-HR1	2026-05-07	< 2.0.0-HR1
CVE-2026-3832US	—	0.80% (57th)	—	2.0.0-HR1	2026-04-30	< 2.0.0-HR1
CVE-2026-5260US	—	0.77% (55th)	—	2.0.0-HR1	2026-05-26	< 2.0.0-HR1
CVE-2026-42015US	—	0.73% (54th)	—	2.0.0-HR1	2026-05-26	< 2.0.0-HR1
CVE-2025-61723US	—	0.66% (51st)	—	no fix	2025-10-29	≤ A <1.8.4
CVE-2025-61725US	—	0.65% (51st)	—	no fix	2025-10-29	≤ A <1.8.4
CVE-2026-3833US	high7.4	0.56% (47th)	—	2.0.0-HR1	2026-04-30	< 2.0.0-HR1
CVE-2025-58186US	—	0.56% (47th)	—	no fix	2025-10-29	≤ A <1.8.4
CVE-2025-61724US	—	0.56% (46th)	—	no fix	2025-10-29	≤ A <1.8.4
CVE-2025-58185US	—	0.56% (46th)	—	no fix	2025-10-29	≤ A <1.8.4
CVE-2025-47906US	—	0.55% (46th)	—	no fix	2025-09-18	≤ A <1.8.4
CVE-2026-5419US	—	0.54% (45th)	—	2.0.0-HR1	2026-06-01	< 2.0.0-HR1
CVE-2026-42011US	—	0.47% (41st)	—	2.0.0-HR1	2026-05-07	< 2.0.0-HR1
CVE-2025-58189US	—	0.47% (40th)	—	no fix	2025-10-29	≤ A <1.8.4
CVE-2025-47912US	—	0.47% (40th)	—	no fix	2025-10-29	≤ A <1.8.4
CVE-2025-58183US	—	0.44% (38th)	—	no fix	2025-10-29	≤ A <1.8.4
CVE-2026-42013US	—	0.42% (36th)	—	2.0.0-HR1	2026-05-26	< 2.0.0-HR1
CVE-2025-58187US	—	0.41% (35th)	—	no fix	2025-10-29	≤ A <1.8.4
CVE-2025-58188US	—	0.38% (32nd)	—	no fix	2025-10-29	≤ A <1.8.4
CVE-2026-42012US	—	0.35% (29th)	—	2.0.0-HR1	2026-05-26	< 2.0.0-HR1
CVE-2026-42014US	—	0.15% (4th)	—	2.0.0-HR1	2026-06-16	< 2.0.0-HR1
CVE-2025-20096US	—	0.15% (4th)	—	no fix	2026-03-10	≤ A <1.8.0
CVE-2025-20105US	—	0.12% (2nd)	—	no fix	2026-03-10	≤ A <1.8.0
CVE-2025-20064US	—	0.11% (1st)	—	no fix	2026-03-10	≤ A <1.8.0
CVE-2025-20068US	—	0.11% (1st)	—	no fix	2026-03-10	≤ A <1.8.0
CVE-2025-20027US	—	0.11% (1st)	—	no fix	2026-03-10	≤ A <1.8.0
CVE-2025-22444US	—	0.10% (1st)	—	no fix	2026-03-10	≤ A <1.8.0
CVE-2025-20073US	—	0.10% (1st)	—	no fix	2026-03-10	≤ A <1.8.0
CVE-2025-20005US	—	0.10% (1st)	—	no fix	2026-03-10	≤ A <1.8.0
CVE-2025-20028US	—	0.08% (0th)	—	no fix	2026-03-10	≤ A <1.8.0
CVE-2025-22850US	—	0.08% (0th)	—	no fix	2026-03-10	≤ A <1.8.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-770Allocation of Resources Without Limits or Throttling5 CVEs
CWE-295Improper Certificate Validation4 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-1284Improper Validation of Specified Quantity in Input2 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition2 CVEs
CWE-416Use After Free2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan