CVE-2026-40698: Privilege Escalation in F5 BIG-IP

Successful exploitation of CVE-2026-40698 allows an attacker to escalate their privileges within the BIG-IP or BIG-IQ environment. This means an attacker who already possesses a Resource Administrator role can gain significantly broader control over the system, potentially including access to sensitive data, modification of configurations, and even complete system takeover. The ability to manipulate SNMP configurations can be used to intercept network traffic, gather system information, and launch further attacks. The blast radius extends to any data or services managed by the BIG-IP or BIG-IQ appliance, making this a critical vulnerability to address.

1. Reserviert2026-04-30
2. Veröffentlicht2026-05-13

The primary mitigation for CVE-2026-40698 is to upgrade to F5 BIG-IP or BIG-IQ version 21.0.0.2 or later. If an immediate upgrade is not feasible, consider implementing temporary workarounds. Restrict access to the iControl REST interface and the TMOS shell (tmsh) to only authorized personnel. Review existing SNMP configurations for any anomalies or suspicious entries. Implement strict access controls and multi-factor authentication for all administrative accounts. After upgrading, verify the fix by attempting to create an SNMP configuration object using the Resource Administrator role; the operation should be denied.