PT-2026-40672 · F5 · Big-Ip+1

Published

2026-05-13

·

Updated

2026-05-13

·

CVE-2026-42780

CVSS v3.1

4.9

Medium

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
A directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an authenticated attacker with high privilege to overwrite, delete or corrupt arbitrary local files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Fix

Path traversal

Weakness Enumeration

Related Identifiers

CVE-2026-42780

Affected Products

Big-Ip
Ssl Orchestrator