CVE-2021-22991
F5 BIG-IP Traffic Management Microkernel
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
What it is
The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other F5 entries on the list
- BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CVE-2026-94127 · Sep 22, 2026
- BIG-IP F5 BIG-IP Stack-Based Buffer Overflow Vulnerability CVE-2025-53521 · Mar 27, 2026
- BIG-IP Configuration Utility F5 BIG-IP Configuration Utility SQL Injection Vulnerability CVE-2023-46748 · Oct 31, 2023
- BIG-IP Configuration Utility F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability CVE-2023-46747 · Oct 31, 2023
- BIG-IP F5 BIG-IP Missing Authentication Vulnerability CVE-2022-1388 · May 10, 2022
- BIG-IP and BIG-IQ Centralized Management F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability CVE-2021-22986 · Nov 3, 2021