PT-2026-40637 · F5 · Big-Ip

Published 2026-05-13 · Updated 2026-05-22 · CVE-2026-34019

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 17.1.3 F5 BIG-IP versions prior to 17.5.1

Description When Bidirectional Forwarding Detection (BFD), a network protocol used to quickly detect faults in the bidirectional path between two forwarding engines, is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD packets. This leads to the failure of the configured routing protocol.

Recommendations Update to version 17.1.3 or later. Update to version 17.5.1 or later.

Fix

Weakness Enumeration

CWE-410

Related Identifiers

CVE-2026-34019

Affected Products

Big-Ip

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-34019 · Security Note
• https://twitter.com/f1tym1/status/2057777015990747530 · Twitter Post
• https://my.f5.com/manage/s/article/K000150508 · Patch, Vendor Advisory