CVE-2026-40631

Description

An authenticated attacker with the Resource Administrator or Administrator role can modify configuration objects through iControl SOAP resulting in privilege escalation.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS Vector

References

• https://my.f5.com/manage/s/article/K000160979