Skip to content
Threat Feed

Tag

Icontrol

2 briefs RSS
high advisory

CVE-2026-40631: F5 iControl SOAP Privilege Escalation

An authenticated attacker with Resource Administrator or Administrator roles can modify configuration objects through iControl SOAP in F5 products, leading to privilege escalation via CVE-2026-40631.

privilege-escalation f5 icontrol soap
2r 1t 1c
critical advisory

F5 iControl REST RCE Vulnerability (CVE-2026-41225)

CVE-2026-41225 allows a highly privileged, authenticated attacker with at least the Manager role to create configuration objects in F5 iControl REST, leading to arbitrary command execution.

iControl REST cve rce f5 icontrol
2r 1t 1c