F5
898 CVEs across 116 months on the top 200 list since Mar 2002. Peak rank #16 in 2 months, last May 2026. 11 of them are now in CISA KEV.
F5 CVEs per month since Mar 2002
Dec 2021: below the top 200 that month, 2 or fewer CVEsJan 2022: 25 CVEs · 0 critical · 0 now in CISA KEV · rank #35 · mostly BIG-IP Advanced Firewall Manager, BIG-IP Access Policy Manager, BIG-IP Application Acceleration ManagerFeb 2022: 3 CVEs · 2 critical · 0 now in CISA KEV · rank #155 · mostly NjsMar 2022: below the top 200 that month, 3 or fewer CVEsApr 2022: 4 CVEs · 1 critical · 0 now in CISA KEV · rank #139 · mostly Njs, NGINX Ingress ControllerMay 2022: 45 CVEs · 2 critical · 1 now in CISA KEV · rank #16 · mostly BIG-IP Access Policy Manager, BIG-IP Application Security Manager, BIG-IP Advanced Firewall ManagerJun 2022: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #194 · mostly NjsJul 2022: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #100 · mostly NjsAug 2022: 21 CVEs · 0 critical · 0 now in CISA KEV · rank #39 · mostly BIG-IP Access Policy Manager, BIG-IP Domain Name System, BIG-IP Advanced Firewall ManagerSep 2022: below the top 200 that month, 3 or fewer CVEsOct 2022: 21 CVEs · 1 critical · 0 now in CISA KEV · rank #42 · mostly BIG-IP Application Security Manager, BIG-IP Advanced Firewall Manager, BIG-IP Domain Name SystemNov 2022: below the top 200 that month, 3 or fewer CVEsDec 2022: below the top 200 that month, 3 or fewer CVEsJan 2023: below the top 200 that month, 3 or fewer CVEsFeb 2023: 17 CVEs · 0 critical · 0 now in CISA KEV · rank #46 · mostly BIG-IP, BIG-IP Access Policy Manager, BIG-IP Application Security ManagerMar 2023: no snapshot, the run for this month failedApr 2023: 6 CVEs · 2 critical · 0 now in CISA KEV · rank #102 · mostly NjsMay 2023: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #72 · mostly BIG-IP Access Policy Manager, BIG-IP, BIG-IP Domain Name SystemJun 2023: below the top 200 that month, 4 or fewer CVEsJul 2023: below the top 200 that month, 3 or fewer CVEsAug 2023: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #110 · mostly BIG-IP Access Policy Manager, BIG-IP, BIG-IP Application Acceleration ManagerSep 2023: below the top 200 that month, 3 or fewer CVEsOct 2023: 18 CVEs · 2 critical · 3 now in CISA KEV · rank #43 · mostly BIG-IP Access Policy Manager, BIG-IP Local Traffic Manager, BIG-IP Domain Name SystemNov 2023: below the top 200 that month, 4 or fewer CVEsDec 2023: below the top 200 that month, 4 or fewer CVEsJan 2024: below the top 200 that month, 4 or fewer CVEsFeb 2024: 20 CVEs · 0 critical · 0 now in CISA KEV · rank #40 · mostly BIG-IP, BIG-IP Application Security Manager, BIG-IP Advanced Firewall ManagerMar 2024: below the top 200 that month, 4 or fewer CVEsApr 2024: below the top 200 that month, 4 or fewer CVEsMay 2024: 18 CVEs · 0 critical · 0 now in CISA KEV · rank #62 · mostly BIG-IP Access Policy Manager, BIG-IP, BIG-IP SSL OrchestratorJun 2024: below the top 200 that month, 4 or fewer CVEsJul 2024: below the top 200 that month, 4 or fewer CVEsAug 2024: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #75 · mostly BIG-IP Link Controller, BIG-IP, BIG-IP Access Policy ManagerSep 2024: below the top 200 that month, 3 or fewer CVEsOct 2024: below the top 200 that month, 4 or fewer CVEsNov 2024: below the top 200 that month, 4 or fewer CVEsDec 2024: below the top 200 that month, 3 or fewer CVEsJan 2025: below the top 200 that month, 4 or fewer CVEsFeb 2025: 17 CVEs · 0 critical · 0 now in CISA KEV · rank #46 · mostly BIG-IP, BIG-IP Policy Enforcement Manager, BIG-IP Access Policy ManagerMar 2025: below the top 200 that month, 5 or fewer CVEsApr 2025: below the top 200 that month, 4 or fewer CVEsMay 2025: 12 CVEs · 0 critical · 0 now in CISA KEV · rank #67 · mostly BIG-IP, BIG-IP Access Policy Manager, BIG-IP Policy Enforcement ManagerJun 2025: below the top 200 that month, 4 or fewer CVEsJul 2025: below the top 200 that month, 5 or fewer CVEsAug 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #138 · mostly BIG-IP, BIG-IP Access Policy Manager, BIG-IP Container Ingress ServicesSep 2025: below the top 200 that month, 4 or fewer CVEsOct 2025: 44 CVEs · 0 critical · 1 now in CISA KEV · rank #23 · mostly BIG-IP, BIG-IP Application Security Manager, BIG-IP Advanced Web Application FirewallNov 2025: below the top 200 that month, 4 or fewer CVEsDec 2025: below the top 200 that month, 5 or fewer CVEsJan 2026: below the top 200 that month, 5 or fewer CVEsFeb 2026: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #168 · mostly BIG-IP, BIG-IP Container Ingress Services, BIG-IP Access Policy ManagerMar 2026: below the top 200 that month, 7 or fewer CVEsApr 2026: below the top 200 that month, 6 or fewer CVEsMay 2026: 53 CVEs · 1 critical · 0 now in CISA KEV · rank #16 · mostly BIG-IP, BIG-IP SSL Orchestrator, BIG-IP Application Security ManagerJun 2026: below the top 200 that month, 7 or fewer CVEsJul 2026: 8 CVEs · 0 critical · 0 now in CISA KEV · rank #162 · mostly NGINX Plus, NGINX Open Source, NGINX Ingress ControllerAug 2026: below the top 200 that month, 8 or fewer CVEsSep 2026: 9 CVEs · 1 critical · 1 now in CISA KEV · rank #194 · mostly NGINX JavaScript, BIG-IP, BIG-IP Access Policy ManagerOct 2026: 11 CVEs · 0 critical · 0 now in CISA KEV · rank #187 · mostly NGINX Plus, NGINX Open Source, NGINX JavaScriptNov 2026: below the top 200 that month, 3 or fewer CVEs
In the lens
The products that kept showing up in F5's monthly top three from Dec 2021 to Nov 2026. Move the lens and the list follows.
Year by year
Each year's months on the top 200 list. Pick a year to read it in the lens.
The record
- Peak rank
- #16 in 2 months, last May 2026
- Busiest month
- May 2026, 53 CVEs
- Months with a KEV entry
- 8 of 116 on the list
- On the top 200 list
- 116 of 278 monthly snapshots