CVE-2026-41954

CVE-2026-41954CVE-2026-41954

f5 / big-ip_access_policy_manager

Description

Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Scoring

CVSS 4.9 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Last modified2026-06-24
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.