CVE-2022-1388Used in ransomware
F5 BIG-IP
F5 BIG-IP Missing Authentication Vulnerability
What it is
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other F5 entries on the list
- BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CVE-2026-94127 · Sep 22, 2026
- BIG-IP F5 BIG-IP Stack-Based Buffer Overflow Vulnerability CVE-2025-53521 · Mar 27, 2026
- BIG-IP Configuration Utility F5 BIG-IP Configuration Utility SQL Injection Vulnerability CVE-2023-46748 · Oct 31, 2023
- BIG-IP Configuration Utility F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability CVE-2023-46747 · Oct 31, 2023
- BIG-IP Traffic Management Microkernel F5 BIG-IP Traffic Management Microkernel Buffer Overflow CVE-2021-22991 · Jan 18, 2022
- BIG-IP and BIG-IQ Centralized Management F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability CVE-2021-22986 · Nov 3, 2021