https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 15:17:08 +0000 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1111 certfr-2026-avi-1111 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1111 https://vulnerability.circl.lu/vuln/fkie_cve-2026-66842 <p>BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI).</p> <p>Impact:</p> <p>This vulnerability may allow an authenticated attacker with network access to the BIG-IP management interface to escalate privileges by creating administrative accounts on the BIG-IP system. There is no data plane exposure; this is a control plane issue only.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI).</p> <p>Impact:</p> <p>This vulnerability may allow an authenticated attacker with network access to the BIG-IP management interface to escalate privileges by creating administrative accounts on the BIG-IP system. There is no data plane exposure; this is a control plane issue only.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-66842 https://vulnerability.circl.lu/vuln/ghsa-cgm7-wqwh-h7hh <p>BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI).</p> <p>Impact:</p> <p>This vulnerability may allow an authenticated attacker with network access to the BIG-IP management interface to escalate privileges by creating administrative accounts on the BIG-IP system. There is no data plane exposure; this is a control plane issue only.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI).</p> <p>Impact:</p> <p>This vulnerability may allow an authenticated attacker with network access to the BIG-IP management interface to escalate privileges by creating administrative accounts on the BIG-IP system. There is no data plane exposure; this is a control plane issue only.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://vulnerability.circl.lu/vuln/ghsa-cgm7-wqwh-h7hh