PT-2026-40637 · F5 · Big-Ip+20

CVE-2026-34019 · Published 2026-05-13 · Updated 2026-06-29

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 17.1.3 F5 BIG-IP versions prior to 17.5.1

Description When Bidirectional Forwarding Detection (BFD), a network protocol used to quickly detect faults in the bidirectional path between two forwarding engines, is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD packets. This leads to the failure of the configured routing protocol.

Recommendations Update to version 17.1.3 or later. Update to version 17.5.1 or later.

Fix

Weakness Enumeration

CWE-410

Related Identifiers

CVE-2026-34019

Affected Products

Big-Ip

Big-Ip Access Policy Manager

Big-Ip Advanced Firewall Manager

Big-Ip Advanced Web Application Firewall

Big-Ip Analytics

Big-Ip Application Acceleration Manager

Big-Ip Application Security Manager

Big-Ip Application Visibility/Reporting

Big-Ip Automation Toolchain

Big-Ip Carrier-Grade Nat

Big-Ip Container Ingress Services

Big-Ip Ddos Hybrid Defender

Big-Ip Domain Name System

Big-Ip Edge Gateway

Big-Ip Fraud Protection Service

Big-Ip Local Traffic Manager

Big-Ip Link Controller

Big-Ip Policy Enforcement Manager

Big-Ip Ssl Orchestrator

Big-Ip Webaccelerator

Big-Ip Websafe

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-34019 · Security Note
• https://my.f5.com/manage/s/article/K000150508 · Patch, Vendor Advisory
• https://t.me/cveNotify/178456 · Telegram Post
• https://twitter.com/f1tym1/status/2057777015990747530 · Twitter Post