CVE-2026-42406 - BIG-IP and BIG-IQ privilege escalation vulnerability

Back Back to CVE browser

HIGH

BIG-IP and BIG-IQ privilege escalation vulnerability

Published May 13, 2026

8.5

HIGH

CVSS 4.0

EPSS 0.25%

Description

A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

Vendor F5 Product Big-IP Default
unknown
Affected
- 16.1.0
- ≥ 17.1.0, < 17.1.3.2
- ≥ 17.5.0, < 17.5.1.6
- ≥ 21.0.0, < 21.0.0.2
Unaffected
- 21.1.0
Vendor F5 Product Big-IQ Default
unaffected
Affected
- 8.4.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
F5	Big-IP	unknown	Affected 16.1.0 ≥ 17.1.0, < 17.1.3.2 ≥ 17.5.0, < 17.5.1.6 ≥ 21.0.0, < 21.0.0.2 Unaffected 21.1.0
F5	Big-IQ	unaffected	Affected 8.4.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-267

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-29997
Advisory
https://my.f5.com/manage/s/article/K000160971
vendor-advisorypatchMitigationVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-29997		Advisory
https://my.f5.com/manage/s/article/K000160971		vendor-advisorypatchMitigationVendor Advisory

Change history (189)

Sep 23, 2026, 18:49 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 23, 2026, 16:48 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 23, 2026, 12:49 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 23, 2026, 10:50 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 23, 2026, 08:49 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 23, 2026, 06:49 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 23, 2026, 04:49 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 23, 2026, 02:49 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 23, 2026, 00:49 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 22:49 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 20:49 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 17:28 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 15:28 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 13:28 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 11:28 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 09:28 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 07:38 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 05:28 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 03:30 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 22, 2026, 01:29 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 23:27 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 21:27 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 19:27 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 17:27 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 15:27 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 13:27 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 11:27 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 09:27 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 04:34 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 02:33 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 21, 2026, 00:36 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5
- CVSS severity
  changed from MEDIUM to HIGH
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS score
  changed from 6.5 to 8.7
Sep 20, 2026, 22:44 UTC MITRE
- CVSS severity
  changed from HIGH to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS score
  changed from 8.7 to 6.5

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner f5

Published May 13, 2026

Updated May 14, 2026

Reserved Apr 30, 2026

Link CVE-2026-42406

CISA Vulnrichment

Updated May 13, 2026

NVD

Status Analyzed

Modified Jun 23, 2026

Link CVE-2026-42406

Red Hat

No data

ENISA EUVD

Assigner f5

Published May 13, 2026

Updated May 14, 2026

Link EUVD-2026-29997

GitHub

No data