Rapid7

vulnerability

F5: CVE-2026-42930: K000160876: Appliance mode iControl REST vulnerability CVE-2026-42930

Severity
8
CVSS
(AV:N/AC:L/Au:M/C:C/I:C/A:N)
Published
May 13, 2026
Added
Jun 5, 2026
Modified
Jun 5, 2026

Description

When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions on a BIG-IP system.

Solution

f5-bigip-upgrade-latest
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.