CVE 7.5 HIGH

BIG-IP SSL/TLS vulnerability_CVE-2026-40618

7.5 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel QuickAssist Technology (QAT) or on BIG-IP hardware platforms with the database variable crypto.hwacceleration set to disabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Basic Information

ID CVE-2026-40618
Source f5
Published May 13, 2026 at 14:12

Affected Product

Vendor F5
Product BIG-IP
Version 21.1.0
Affected Versions F5 BIG-IP 21.0.0
F5 BIG-IP 17.5.0
F5 BIG-IP 17.1.0
F5 BIG-IP 16.1.0
F5 BIG-IP Next SPK 2.0.0
F5 BIG-IP Next SPK 1.7.0
F5 BIG-IP Next CNF 2.0.0
F5 BIG-IP Next CNF 1.1.0
F5 BIG-IP Next for Kubernetes 2.0.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.