CVE Tools

F5

898 CVEs tracked since 2002. Since Sep 2016, 8 of them reached CISA KEV.

F5 CVEs per month

Sep 2016 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
F5 CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2016-0920
2016-1020
2016-11no snapshot
2016-120
2017-01no snapshot
2017-0220
2017-0340
2017-04no snapshot
2017-05100
2017-06no snapshot
2017-071 or fewer
2017-082 or fewer
2017-091 or fewer
2017-10110
2017-11no snapshot
2017-12140
2018-0120
2018-021 or fewer
2018-03110
2018-04no snapshot
2018-05no snapshot
2018-06100
2018-07170
2018-0830
2018-0961
2018-10180
2018-11no snapshot
2018-12100
2019-01no snapshot
2019-02150
2019-03no snapshot
2019-04no snapshot
2019-05190
2019-06no snapshot
2019-07300
2019-0850
2019-09150
2019-10110
2019-11210
2019-12160
2020-0150
2020-0240
2020-0370
2020-04no snapshot
2020-05no snapshot
2020-062 or fewer
2020-07no snapshot
2020-08210
2020-0920
2020-1080
2020-1190
2020-12210
2021-012 or fewer
2021-02130
2021-03no snapshot
2021-042 or fewer
2021-0590
2021-0690
2021-072 or fewer
2021-083 or fewer
2021-09311
2021-102 or fewer
2021-112 or fewer
2021-122 or fewer
2022-01250
2022-0230
2022-033 or fewer
2022-0440
2022-05451
2022-0630
2022-0760
2022-08210
2022-093 or fewer
2022-10210
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-02170
2023-03no snapshot
2023-0460
2023-05100
2023-064 or fewer
2023-073 or fewer
2023-0870
2023-093 or fewer
2023-10183
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-02200
2024-034 or fewer
2024-044 or fewer
2024-05180
2024-064 or fewer
2024-074 or fewer
2024-08100
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-02170
2025-035 or fewer
2025-044 or fewer
2025-05120
2025-064 or fewer
2025-075 or fewer
2025-0860
2025-094 or fewer
2025-10441
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-0260
2026-037 or fewer
2026-046 or fewer
2026-05530
2026-067 or fewer
2026-0780
2026-088 or fewer
2026-0991
2026-10110
2026-113 or fewer

Products

The products that kept showing up in F5's monthly top three, with their CVEs summed over those months.

  1. BIG-IP Access Policy Manager36539 months
  2. BIG-IP Application Security Manager28222 months
  3. BIG-IP Advanced Firewall Manager19521 months
  4. BIG-IP16113 months
  5. BIG-IP Policy Enforcement Manager889 months
  6. BIG-IP Domain Name System798 months
  7. BIG-IP Local Traffic Manager6911 months
  8. BIG-IP Application Acceleration Manager609 months
  9. BIG-IP SSL Orchestrator302 months
  10. BIG-IP Advanced Web Application Firewall292 months

Latest CVEs

The 15 most recently published vulnerabilities affecting F5.

  1. CVE-2026-104939NGINX Ingress Controller vulnerability7.5
  2. CVE-2026-101025NGINX ngx_http_js_module vulnerability5.3
  3. CVE-2026-101019NGINX ngx_http_js_module vulnerability6.5
  4. CVE-2026-96615NGINX Gateway Fabric vulnerability6.5
  5. CVE-2026-94197NGINX Ingress Controller vulnerability7.5
  6. CVE-2026-95101NGINX ngx_http_v3_module vulnerability5.3
  7. CVE-2026-97205NGINX ngx_http_core_module vulnerability8.1
  8. CVE-2026-93479NGINX map directive and regex matching vulnerability8.1
  9. CVE-2026-91184NGINX Gateway Fabric vulnerability8.8
  10. CVE-2026-97629NGINX ngx_http_ssl_module vulnerability6.5
  11. CVE-2026-15176NGINX ngx_http_core_module vulnerability8.1
  12. CVE-2026-94127BIG-IP APM OAuth vulnerability9.8
  13. CVE-2026-90439NGINX ngx_http_v3_module vulnerability6.5
  14. CVE-2026-78222NGINX ngx_http_js_module vulnerability7.5
  15. CVE-2026-78689NGINX ngx_http_js_module vulnerablility8.1

The record

Peak rank
#16 in May 2026
Busiest month shown
May 2026, 53 CVEs
Months with a KEV entry
6 since Sep 2016
Monthly snapshots
116 since 2002
F5's full record, month by month