Dashboard / CVE-2026-34019

CVE-2026-34019

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 73/100
Published: 2026-05-13 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: X
AT: Present
VC: None
VI: None
VA: Low

Description

When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD packets and cause the configured routing protocol to fail over.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness Classification (1)

Affected Software (42)

VendorProductVersion
f5 big-ip_access_policy_manager 17.1.0 – 17.1.2
f5 big-ip_access_policy_manager 17.5.0
f5 big-ip_advanced_firewall_manager 17.1.0 – 17.1.2
f5 big-ip_advanced_firewall_manager 17.5.0
f5 big-ip_advanced_web_application_firewall 17.1.0 – 17.1.2
f5 big-ip_advanced_web_application_firewall 17.5.0
f5 big-ip_analytics 17.1.0 – 17.1.2
f5 big-ip_analytics 17.5.0
f5 big-ip_application_acceleration_manager 17.1.0 – 17.1.2
f5 big-ip_application_acceleration_manager 17.5.0
f5 big-ip_application_security_manager 17.1.0 – 17.1.2
f5 big-ip_application_security_manager 17.5.0
f5 big-ip_application_visibility_and_reporting 17.1.0 – 17.1.2
f5 big-ip_application_visibility_and_reporting 17.5.0
f5 big-ip_automation_toolchain 17.1.0 – 17.1.2
f5 big-ip_automation_toolchain 17.5.0
f5 big-ip_carrier-grade_nat 17.1.0 – 17.1.2
f5 big-ip_carrier-grade_nat 17.5.0
f5 big-ip_container_ingress_services 17.1.0 – 17.1.2
f5 big-ip_container_ingress_services 17.5.0
f5 big-ip_ddos_hybrid_defender 17.1.0 – 17.1.2
f5 big-ip_ddos_hybrid_defender 17.5.0
f5 big-ip_domain_name_system 17.1.0 – 17.1.2
f5 big-ip_domain_name_system 17.5.0
f5 big-ip_edge_gateway 17.1.0 – 17.1.2
f5 big-ip_edge_gateway 17.5.0
f5 big-ip_fraud_protection_service 17.1.0 – 17.1.2
f5 big-ip_fraud_protection_service 17.5.0
f5 big-ip_global_traffic_manager 17.1.0 – 17.1.2
f5 big-ip_global_traffic_manager 17.5.0
Showing 30 of 42 entries

References & Advisories (1)

Bug Bounty Relevance

73 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

6.3 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.29%
Raw Score 0.002930
Percentile 21.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00293
2026-10-28
0.00293

Intelligence Sources

nvd ref →

External Links