Skip to content
Threat Feed

Product

BIG-IP DNS

1 brief RSS
high advisory

CVE-2026-40061: BIG-IP DNS iControl REST/TMSH Command Injection Vulnerability

CVE-2026-40061 is a vulnerability in F5 BIG-IP DNS that allows an authenticated attacker with Resource Administrator or Administrator privileges to execute arbitrary system commands with elevated privileges via undisclosed iControl REST and TMOS Shell (tmsh) commands, potentially crossing security boundaries in Appliance mode deployments.

BIG-IP DNS privilege-escalation execution cve
2r 2t 1c