PT-2026-40671 · F5 · Big-Ip+3

Published

2026-05-13

·

Updated

2026-05-13

·

CVE-2026-42409

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Fix

NULL Pointer Dereference

Weakness Enumeration

Related Identifiers

CVE-2026-42409

Affected Products

Big-Ip
Big-Ip Next Cnf
Big-Ip Next Spk
Big-Ip Next For Kubernetes