Skip to content
Threat Feed

Product

IControl REST

2 briefs RSS
high advisory

CVE-2026-39459 - F5 iControl REST and TMOS Shell (tmsh) Arbitrary Command Execution

CVE-2026-39459 describes a vulnerability in F5's iControl REST and TMOS Shell (tmsh) where a privileged, authenticated attacker with at least the Manager role can execute arbitrary commands by creating malicious configuration objects.

iControl REST +1 cve rce f5 privilege escalation
2r 2t 1c
critical advisory

F5 iControl REST RCE Vulnerability (CVE-2026-41225)

CVE-2026-41225 allows a highly privileged, authenticated attacker with at least the Manager role to create configuration objects in F5 iControl REST, leading to arbitrary command execution.

iControl REST cve rce f5 icontrol
2r 1t 1c