CVE-2026-42937
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
May 13, 2026
Vendor
unknown
Description
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view adjacent network information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.