CVE-2025-61974

High CVSS: 8.7

When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vendor

Product

Big-ip Next Cloud-native Network Functions

CWE

CWE-401

Yayın Tarihi

2025-10-15 14:15:57

Güncelleme

2025-10-21 21:09:04

Source Identifier

f5sirt@f5.com

KEV Date Added

Kategoriler

CWE-401 Big-ip Next Cloud-native Network Functions HIGH F5 2025

Referanslar

https://my.f5.com/manage/s/article/K000156733

Benzer Kayıtlar

High

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker t…

High

CVE-2026-27654

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker to…

High

CVE-2026-27784

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow…

Medium

CVE-2026-28753

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of…

Medium

CVE-2026-28755

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling o…

High

CVE-2026-27651

When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause…