CVE-2021-22986Used in ransomware
F5 BIG-IP and BIG-IQ Centralized Management
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
What it is
F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other F5 entries on the list
- BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CVE-2026-94127 · Sep 22, 2026
- BIG-IP F5 BIG-IP Stack-Based Buffer Overflow Vulnerability CVE-2025-53521 · Mar 27, 2026
- BIG-IP Configuration Utility F5 BIG-IP Configuration Utility SQL Injection Vulnerability CVE-2023-46748 · Oct 31, 2023
- BIG-IP Configuration Utility F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability CVE-2023-46747 · Oct 31, 2023
- BIG-IP F5 BIG-IP Missing Authentication Vulnerability CVE-2022-1388 · May 10, 2022
- BIG-IP Traffic Management Microkernel F5 BIG-IP Traffic Management Microkernel Buffer Overflow CVE-2021-22991 · Jan 18, 2022