CVE-2026-42781CWE-835

BIG-IP FastL4 virtual server vulnerability

High · published May 13, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can cause an increase in ePVA and Traffic Management Microkernel (TMM) resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00269 · 18.0th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2026-05-13T14:12Z
EPSS history
Timeline
  • 13 MAY 14:12Z
    BIG-IP FastL4 virtual server vulnerability
    cvelistv5