CVE-2026-41953: Privilege Escalation in F5 BIG-IP

The impact of CVE-2026-41953 is significant due to the potential for privilege escalation. An attacker who has already gained access to the BIG-IP system with Resource Administrator privileges can leverage this vulnerability to gain even higher levels of control, potentially compromising the entire system. This could involve modifying critical configurations, accessing sensitive data, or disrupting services. The ability to modify configuration objects provides a broad attack surface, allowing attackers to tailor their actions to achieve specific objectives. Successful exploitation could lead to complete system compromise and data exfiltration, impacting the confidentiality, integrity, and availability of the BIG-IP system and any services it supports.

1. Reserviert2026-04-30
2. Veröffentlicht2026-05-13

The primary mitigation for CVE-2026-41953 is to upgrade to F5 BIG-IP version 21.0.0.2 or later. If an immediate upgrade is not feasible, consider implementing stricter access controls to limit the number of users with the Resource Administrator role. Review existing configurations for any unusual or suspicious changes that may indicate exploitation. While a direct WAF rule is unlikely to prevent this, implementing strict input validation and output encoding on any web applications running behind the BIG-IP can reduce the potential impact of a compromised system. After upgrading, verify the fix by attempting to modify a configuration object with a user account possessing the Resource Administrator role; the modification should be denied.