PT-2026-6106 · F5 · F5 Big-Ip Apm+1

Published 2026-02-04 · Updated 2026-02-06 · CVE-2026-22548

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF and ASM (affected versions not specified)

Description A configuration issue within BIG-IP Advanced WAF or ASM security policies on a virtual server can lead to the termination of the bd process due to undisclosed requests and conditions outside of an attacker's control. Software versions that have reached End of Technical Support are not evaluated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-22548

Affected Products

F5 Big-Ip Apm

F5 Big-Ip Advanced Waf

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-22548 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22548 · Vendor Advisory
• https://my.f5.com/manage/s/article/K000158072 · Vendor Advisory
• https://twitter.com/ThreatSynop/status/2019360855385657391 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2019075632441819310 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1qws2aj/cisco_and_f5_address_critical_security_flaws · Reddit Post
• https://twitter.com/ThreatSynop/status/2019670941471482055 · Twitter Post