CVE-2021-22986

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.

CISA Known Exploited Vulnerability

Vendor / Product F5 — BIG-IP and BIG-IQ Centralized Management
Date Added 2021-11-03
Remediation Due 2021-11-17
Ransomware Use CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2021-22986

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →