Security updates¶
This page lists the F5 vulnerability bugs of this release.
CVE Fixes¶
| CVE Number | Bug IDs | Image Names | Package Name |
|---|---|---|---|
| CVE-2016-2781 | 2071953 | BaseOS | coreutils |
| CVE-2022-3219 | 1639141, 2071957, 2103113, 2215341, 2237549, 2237597, 2237645, 2237693, 2237741, 2237749, 2237797, 2237889, 2237913, 2237921, 2237937, 2237985, 2238033, 2238081, 2238093, 2238145, 2238153, 2238181, 2238245, 2238253, 2238301, 2238309, 2254985, 2255501, 2255561, 2255677, 2255785, 2256037 | BaseOS, f5-blobd, f5dr-img, rabbit, spk-cwc | dirmngr, gpgv |
| CVE-2022-40897 | 2254221 | f5-fluentd | setuptools |
| CVE-2023-38697 | 2254257 | f5-fluentd | protocol-http1 |
| CVE-2024-58251 | 2253233 | f5dr-img-init | busybox |
| CVE-2025-0167 | 2215369, 2238185 | f5-debug-sidecar | curl |
| CVE-2025-0913 | 2252889, 2254797 | f5ingress | stdlib |
| CVE-2025-10148 | 2070501, 2071321 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2025-10543 | 2253545, 2253865, 2254361, 2254449, 2254649 | crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, spk-cwc | github.com/eclipse/paho.mqtt.golang |
| CVE-2025-11065 | 2254653 | spk-cwc | github.com/go-viper/mapstructure/v2 |
| CVE-2025-11082 | 2255821 | f5-fluentd | binutils |
| CVE-2025-11083 | 2255825 | f5-fluentd | binutils |
| CVE-2025-11187 | 2237077 | f5dr-img-init | libcrypto3 |
| CVE-2025-11412 | 2255829 | f5-fluentd | binutils |
| CVE-2025-11413 | 2255833 | f5-fluentd | binutils |
| CVE-2025-11414 | 2255837 | f5-fluentd | binutils |
| CVE-2025-11468 | 2237505, 2237553, 2237601, 2237649, 2237697, 2237753, 2237845, 2237941, 2237989, 2238037, 2238101, 2238201, 2238257, 2242625 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-1147 | 2255841 | f5-fluentd | binutils |
| CVE-2025-1148 | 2255845 | f5-fluentd | binutils |
| CVE-2025-11494 | 2255849 | f5-fluentd | binutils |
| CVE-2025-1180 | 2215353 | f5-fluentd | binutils |
| CVE-2025-11839 | 2255853 | f5-fluentd | binutils |
| CVE-2025-11840 | 2255857 | f5-fluentd | binutils |
| CVE-2025-12084 | 2237509, 2237557, 2237605, 2237653, 2237701, 2237757, 2237849, 2237945, 2237993, 2238041, 2238105, 2238205, 2238261, 2242629 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-12817 | 2255165 | f5-fluentbit | libpq5 |
| CVE-2025-12818 | 2255169 | f5-fluentbit | libpq5 |
| CVE-2025-13151 | 2254973, 2255021, 2255077, 2255121, 2255173, 2255229, 2255285, 2255341, 2255397, 2255477, 2255537, 2255597, 2255653, 2255713, 2255761, 2255861, 2255925, 2255981, 2256025, 2256073, 2256129, 2256173, 2256229, 2256285 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | libtasn1-6 |
| CVE-2025-13281 | 2254097 | f5-dssm-upgrader | k8s.io/kubernetes |
| CVE-2025-13836 | 2255025, 2255177, 2255233, 2255289, 2255345, 2255481, 2255541, 2255601, 2255657, 2255765, 2255929, 2256077, 2256177, 2256233 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-13837 | 2237513, 2237561, 2237609, 2237657, 2237705, 2237761, 2237853, 2237949, 2237997, 2238045, 2238109, 2238209, 2238265, 2242633 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-14017 | 2237801, 2238161 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2025-14524 | 2215377, 2215397 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2025-14819 | 2215381, 2215401 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2025-14831 | 2229425 | baseos | libgnutls30t64 |
| CVE-2025-15079 | 2215385, 2215405 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2025-15224 | 2215389, 2215409 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2025-15281 | 2229429, 2238341 | baseos | libc-bin |
| CVE-2025-15282 | 2237517, 2237565, 2237613, 2237661, 2237709, 2237765, 2237857, 2237953, 2238001, 2238049, 2238113, 2238213, 2238269, 2242637 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-15366 | 2237521, 2237569, 2237617, 2237665, 2237713, 2237769, 2237861, 2237957, 2238005, 2238053, 2238117, 2238217, 2238273, 2242641 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-15367 | 2237525, 2237573, 2237621, 2237669, 2237717, 2237773, 2237865, 2237961, 2238009, 2238057, 2238121, 2238221, 2238277, 2242645 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-15467 | 2237049, 2254977, 2255029, 2255081, 2255125, 2255181, 2255237, 2255293, 2255349, 2255401, 2255485, 2255545, 2255605, 2255661, 2255717, 2255769, 2255865, 2255933, 2255985, 2256029, 2256081, 2256133, 2256181, 2256237, 2256289 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | libcrypto3, libssl3t64, openssl |
| CVE-2025-15468 | 2237081 | f5dr-img-init | libcrypto3 |
| CVE-2025-15469 | 2237085 | f5dr-img-init | libcrypto3 |
| CVE-2025-22866 | 2252893, 2254801 | f5-nsec-ips-daemon | stdlib |
| CVE-2025-22868 | 2253717, 2254329, 2254425, 2254713 | crd-conversion, crdupdater, f5-downloader, f5ing-tmm-pod-manager | golang.org/x/oauth2 |
| CVE-2025-22869 | 2254333 | f5-downloader | golang.org/x/crypto |
| CVE-2025-22872 | 2252809, 2252981, 2253325, 2253453, 2253669, 2253737, 2253793, 2254369, 2254457, 2254729, 2254813 | f5-blobd, f5-coremond, f5-csm-qkview, f5-toda-tmstatsd | golang.org/x/net |
| CVE-2025-22873 | 2252901, 2254817 | f5-nsec-ips-daemon, f5ingress | stdlib |
| CVE-2025-3198 | 2255869 | f5-fluentd | binutils |
| CVE-2025-40778 | 2255405 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2025-40780 | 2255409 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2025-46394 | 2253293 | f5dr-img-init | busybox |
| CVE-2025-4673 | 2252905, 2254821 | f5ingress | stdlib |
| CVE-2025-47906 | 2252909, 2254825 | f5-nsec-ips-daemon, f5ingress | stdlib |
| CVE-2025-47907 | 2252861, 2254777 | f5-nsec-ips-daemon, f5ingress | stdlib |
| CVE-2025-47912 | 2252741, 2252813, 2252913, 2252985, 2253053, 2253113, 2253173, 2253237, 2253329, 2253389, 2253457, 2253549, 2253553, 2253673, 2253741, 2253797, 2253869, 2253929, 2253985, 2254041, 2254101, 2254165, 2254261, 2254373, 2254461, 2254541, 2254601, 2254657, 2254733, 2254829, 2254881, 2254929 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-47914 | 2252917, 2253241, 2253333, 2253393, 2253557, 2253873, 2253933, 2253989, 2254045, 2254377, 2254465, 2254545, 2254661 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2025-5244 | 2255873 | f5-fluentd | binutils |
| CVE-2025-5245 | 2255877 | f5-fluentd | binutils |
| CVE-2025-5278 | 2251797 | baseos | coreutils |
| CVE-2025-58058 | 2253801 | f5-coremond | github.com/ulikunitz/xz |
| CVE-2025-58181 | 2252921, 2253245, 2253337, 2253397, 2253561, 2253877, 2253937, 2253993, 2254049, 2254381, 2254469, 2254549, 2254665 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2025-58183 | 2252721, 2252797, 2252865, 2252961, 2253033, 2253105, 2253157, 2253221, 2253305, 2253381, 2253441, 2253513, 2253517, 2253653, 2253721, 2253781, 2253849, 2253921, 2253977, 2254033, 2254089, 2254145, 2254237, 2254341, 2254433, 2254513, 2254593, 2254641, 2254717, 2254781, 2254873, 2254921 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-58185 | 2252745, 2252817, 2252925, 2252989, 2253057, 2253117, 2253177, 2253249, 2253341, 2253401, 2253461, 2253565, 2253569, 2253677, 2253745, 2253805, 2253881, 2253941, 2253997, 2254053, 2254105, 2254169, 2254265, 2254385, 2254473, 2254553, 2254605, 2254669, 2254737, 2254833, 2254885, 2254933 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-58186 | 2252749, 2252821, 2252929, 2252993, 2253061, 2253121, 2253181, 2253253, 2253345, 2253405, 2253465, 2253573, 2253577, 2253681, 2253749, 2253809, 2253885, 2253945, 2254001, 2254057, 2254109, 2254173, 2254269, 2254389, 2254477, 2254557, 2254609, 2254673, 2254741, 2254837, 2254889, 2254937 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-58187 | 2252753, 2252825, 2252933, 2252997, 2253065, 2253125, 2253185, 2253257, 2253349, 2253409, 2253469, 2253581, 2253585, 2253685, 2253753, 2253813, 2253889, 2253949, 2254005, 2254061, 2254113, 2254177, 2254273, 2254393, 2254481, 2254561, 2254613, 2254677, 2254745, 2254841, 2254893, 2254941 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-58188 | 2252757, 2252829, 2252937, 2253001, 2253069, 2253129, 2253189, 2253261, 2253353, 2253413, 2253473, 2253589, 2253593, 2253689, 2253757, 2253817, 2253893, 2253953, 2254009, 2254065, 2254117, 2254181, 2254277, 2254397, 2254485, 2254565, 2254617, 2254681, 2254749, 2254845, 2254897, 2254945 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-58189 | 2252761, 2252833, 2252941, 2253005, 2253073, 2253133, 2253193, 2253265, 2253357, 2253417, 2253477, 2253597, 2253601, 2253693, 2253761, 2253821, 2253897, 2253957, 2254013, 2254069, 2254121, 2254185, 2254281, 2254401, 2254489, 2254569, 2254621, 2254685, 2254753, 2254849, 2254901, 2254949 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-6075 | 2255033, 2255185, 2255241, 2255297, 2255353, 2255489, 2255549, 2255609, 2255665, 2255773, 2255937, 2256085, 2256185, 2256241 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-6141 | 2251801 | baseos | libncursesw6 |
| CVE-2025-61594 | 2277037 | f5-fluentd | libruby3.2 |
| CVE-2025-61723 | 2252765, 2252837, 2252945, 2253009, 2253077, 2253137, 2253197, 2253269, 2253361, 2253421, 2253481, 2253605, 2253609, 2253697, 2253765, 2253825, 2253901, 2253961, 2254017, 2254073, 2254125, 2254189, 2254285, 2254405, 2254493, 2254573, 2254625, 2254689, 2254757, 2254853, 2254905, 2254953 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-61724 | 2252769, 2252841, 2252949, 2253013, 2253081, 2253141, 2253201, 2253273, 2253365, 2253425, 2253485, 2253613, 2253617, 2253701, 2253769, 2253829, 2253905, 2253965, 2254021, 2254077, 2254129, 2254193, 2254289, 2254409, 2254497, 2254577, 2254629, 2254693, 2254761, 2254857, 2254909, 2254957 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-61725 | 2252773, 2252845, 2252953, 2253017, 2253085, 2253145, 2253205, 2253277, 2253369, 2253429, 2253489, 2253621, 2253625, 2253705, 2253773, 2253833, 2253909, 2253969, 2254025, 2254081, 2254133, 2254197, 2254293, 2254413, 2254501, 2254581, 2254633, 2254697, 2254765, 2254861, 2254913, 2254961 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-61726 | 2229409, 2236649, 2236677, 2236705, 2236733, 2236761, 2236789, 2236817, 2236845, 2236873, 2236909, 2236913, 2236917, 2236997, 2237025, 2237061, 2237137, 2237165, 2237197, 2237225, 2237277, 2237313, 2237341, 2237373, 2237413, 2237441, 2237481, 2238317, 2242417, 2242433, 2242453, 2242457, 2242509, 2242525, 2242545, 2242561, 2242577, 2252725, 2253037, 2253161, 2253521, 2254149, 2254241, 2254517, 2260737 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-61727 | 2252777, 2252849, 2252957, 2253021, 2253089, 2253149, 2253209, 2253281, 2253373, 2253433, 2253493, 2253629, 2253633, 2253709, 2253777, 2253837, 2253913, 2253973, 2254029, 2254085, 2254137, 2254201, 2254297, 2254417, 2254505, 2254585, 2254637, 2254701, 2254769, 2254865, 2254917, 2254965 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-61728 | 2229433, 2236653, 2236681, 2236709, 2236737, 2236765, 2236793, 2236821, 2236849, 2236877, 2236921, 2236925, 2236929, 2237001, 2237029, 2237065, 2237141, 2237169, 2237201, 2237229, 2237281, 2237317, 2237345, 2237377, 2237417, 2237445, 2237485, 2238321, 2242421, 2242437, 2242461, 2242465, 2242513, 2242529, 2242549, 2242565, 2242581, 2252729, 2253041, 2253165, 2253525, 2254153, 2254245, 2254521, 2260741 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-61729 | 2252733, 2252801, 2252869, 2252965, 2253045, 2253109, 2253169, 2253225, 2253309, 2253385, 2253445, 2253529, 2253533, 2253657, 2253725, 2253785, 2253853, 2253925, 2253981, 2254037, 2254093, 2254157, 2254249, 2254345, 2254437, 2254525, 2254597, 2254645, 2254721, 2254785, 2254877, 2254925 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-61730 | 2229437, 2236657, 2236685, 2236713, 2236741, 2236769, 2236797, 2236825, 2236853, 2236881, 2236933, 2236937, 2236941, 2237005, 2237033, 2237089, 2237145, 2237177, 2237205, 2237233, 2237285, 2237321, 2237353, 2237381, 2237421, 2237449, 2237489, 2238325, 2242425, 2242441, 2242469, 2242473, 2242517, 2242533, 2242553, 2242569, 2242585, 2252781, 2253093, 2253213, 2253637, 2254205, 2254301, 2254589, 2260749 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-61731 | 2229413 | baseos | stdlib |
| CVE-2025-61732 | 2229417 | baseos | stdlib |
| CVE-2025-61984 | 2237825 | f5-debug-sidecar | openssh-client |
| CVE-2025-61985 | 2237829 | f5-debug-sidecar | openssh-client |
| CVE-2025-63811 | 2254529 | opentelemetry-collector-contri | github.com/dvsekhvalnov/jose2go |
| CVE-2025-6442 | 2254305 | f5-fluentd | ruby-webrick |
| CVE-2025-65637 | 2253857, 2254349, 2254441 | crd-conversion, f5-downloader, f5-license-helper | github.com/sirupsen/logrus |
| CVE-2025-66199 | 2237093 | f5dr-img-init | libcrypto3 |
| CVE-2025-68119 | 2229421 | baseos | stdlib |
| CVE-2025-68121 | 2229405, 2236645, 2236673, 2236701, 2236729, 2236757, 2236785, 2236813, 2236841, 2236869, 2236897, 2236901, 2236905, 2236993, 2237021, 2237053, 2237133, 2237161, 2237193, 2237221, 2237249, 2237273, 2237309, 2237337, 2237369, 2237409, 2237437, 2237477, 2238313, 2242413, 2242429, 2242445, 2242449, 2242505, 2242521, 2242541, 2242557, 2242573, 2252717, 2253029, 2253153, 2253497, 2254141, 2254217, 2260733 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2025-68156 | 2254533 | opentelemetry-collector-contri | github.com/expr-lang/expr |
| CVE-2025-68160 | 2237097, 2254989, 2255045, 2255089, 2255133, 2255197, 2255253, 2255309, 2255365, 2255437, 2255505, 2255565, 2255621, 2255681, 2255725, 2255789, 2255893, 2255949, 2255993, 2256041, 2256097, 2256141, 2256197, 2256253, 2256297 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | libcrypto3, libssl3t64, openssl |
| CVE-2025-68972 | 2215337, 2215437, 2237529, 2237593, 2237625, 2237673, 2237721, 2237745, 2237777, 2237805, 2237869, 2237893, 2237917, 2237933, 2237965, 2238013, 2238061, 2238089, 2238125, 2238149, 2238165, 2238225, 2238249, 2238281, 2238305 | baseos, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | dirmngr, gpgv |
| CVE-2025-68973 | 2254969, 2255017, 2255073, 2255117, 2255161, 2255225, 2255281, 2255337, 2255393, 2255473, 2255533, 2255593, 2255649, 2255709, 2255757, 2255817, 2255921, 2255977, 2256021, 2256069, 2256125, 2256169, 2256225, 2256281 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | gpgv |
| CVE-2025-69418 | 2237101, 2254993, 2255049, 2255093, 2255137, 2255201, 2255257, 2255313, 2255369, 2255441, 2255509, 2255569, 2255625, 2255685, 2255729, 2255793, 2255897, 2255953, 2255997, 2256045, 2256101, 2256145, 2256201, 2256257, 2256301 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | libcrypto3, libssl3t64, openssl |
| CVE-2025-69419 | 2237069, 2254997, 2255053, 2255097, 2255141, 2255205, 2255261, 2255317, 2255373, 2255445, 2255513, 2255573, 2255629, 2255689, 2255733, 2255797, 2255901, 2255957, 2256001, 2256049, 2256105, 2256149, 2256205, 2256261, 2256305 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | libcrypto3, libssl3t64, openssl |
| CVE-2025-69420 | 2237105, 2255001, 2255057, 2255101, 2255145, 2255209, 2255265, 2255321, 2255377, 2255449, 2255517, 2255577, 2255633, 2255693, 2255737, 2255801, 2255905, 2255961, 2256005, 2256053, 2256109, 2256153, 2256209, 2256265, 2256309 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | libcrypto3, libssl3t64, openssl |
| CVE-2025-69421 | 2237073, 2255005, 2255061, 2255105, 2255149, 2255213, 2255269, 2255325, 2255381, 2255453, 2255521, 2255581, 2255637, 2255697, 2255741, 2255805, 2255909, 2255965, 2256009, 2256057, 2256113, 2256157, 2256213, 2256269, 2256313 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | libcrypto3, libssl3t64, openssl |
| CVE-2025-7425 | 2255413 | f5-debug-sidecar | libxml2 |
| CVE-2025-7545 | 2255881 | f5-fluentd | binutils |
| CVE-2025-7546 | 2255885 | f5-fluentd | binutils |
| CVE-2025-8114 | 2255457, 2255745 | f5-debug-sidecar, f5-dssm-upgrader | libssh-4 |
| CVE-2025-8225 | 2255889 | f5-fluentd | binutils |
| CVE-2025-8277 | 2237833, 2238189 | f5-debug-sidecar, f5-dssm-upgrader | libssh-4 |
| CVE-2025-8291 | 2255037, 2255189, 2255245, 2255301, 2255357, 2255493, 2255553, 2255613, 2255669, 2255777, 2255941, 2256089, 2256189, 2256245 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-8677 | 2255417 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2025-8732 | 2255461 | f5-debug-sidecar | libxml2 |
| CVE-2025-8869 | 2254309 | f5-fluentd | pip |
| CVE-2025-8941 | 2071949 | baseos | libpam-modules |
| CVE-2025-9086 | 2070505, 2071345 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2025-9230 | 2253285, 2254981, 2255041, 2255085, 2255129, 2255193, 2255249, 2255305, 2255361, 2255421, 2255497, 2255557, 2255617, 2255673, 2255721, 2255781, 2255945, 2255989, 2256033, 2256093, 2256137, 2256193, 2256249, 2256293 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | libcrypto3, libssl3, libssl3t64 |
| CVE-2025-9231 | 2253289 | f5dr-img-init | libcrypto3 |
| CVE-2025-9232 | 2253297 | f5dr-img-init | libcrypto3 |
| CVE-2025-9820 | 2229453 | baseos | libgnutls30t64 |
| CVE-2026-0672 | 2237533, 2237577, 2237629, 2237677, 2237725, 2237781, 2237873, 2237969, 2238017, 2238065, 2238129, 2238229, 2238285, 2242649 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2026-0861 | 2216573 | baseos | libc-bin |
| CVE-2026-0865 | 2237537, 2237581, 2237633, 2237681, 2237729, 2237785, 2237877, 2237973, 2238021, 2238069, 2238133, 2238233, 2238289, 2242653 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2026-0915 | 2229441, 2238345 | baseos | libc-bin |
| CVE-2026-0964 | 2237809, 2238169 | f5-debug-sidecar, f5-dssm-upgrader | libssh-4 |
| CVE-2026-0965 | 2237837, 2238193 | f5-debug-sidecar, f5-dssm-upgrader | libssh-4 |
| CVE-2026-0966 | 2237841, 2238197 | f5-debug-sidecar, f5-dssm-upgrader | libssh-4 |
| CVE-2026-0967 | 2237813, 2238173 | f5-debug-sidecar, f5-dssm-upgrader | libssh-4 |
| CVE-2026-0968 | 2237817, 2238177 | f5-debug-sidecar, f5-dssm-upgrader | libssh-4 |
| CVE-2026-0989 | 2255425 | f5-debug-sidecar | libxml2 |
| CVE-2026-0990 | 2255429 | f5-debug-sidecar | libxml2 |
| CVE-2026-0992 | 2255433 | f5-debug-sidecar | libxml2 |
| CVE-2026-1965 | 2242589, 2242609 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-2003 | 2237897 | f5-fluentbit | libpq5 |
| CVE-2026-2004 | 2237901 | f5-fluentbit | libpq5 |
| CVE-2026-2005 | 2237905 | f5-fluentbit | libpq5 |
| CVE-2026-2006 | 2237909 | f5-fluentbit | libpq5 |
| CVE-2026-22184 | 2237057 | f5dr-img-init | zlib |
| CVE-2026-22795 | 2237109, 2255009, 2255065, 2255109, 2255153, 2255217, 2255273, 2255329, 2255385, 2255465, 2255525, 2255585, 2255641, 2255701, 2255749, 2255809, 2255913, 2255969, 2256013, 2256061, 2256117, 2256161, 2256217, 2256273, 2256317 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | libcrypto3, libssl3t64, openssl |
| CVE-2026-22796 | 2237113, 2255013, 2255069, 2255113, 2255157, 2255221, 2255277, 2255333, 2255389, 2255469, 2255529, 2255589, 2255645, 2255705, 2255753, 2255813, 2255917, 2255973, 2256017, 2256065, 2256121, 2256165, 2256221, 2256277, 2256321 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmm-img, tmrouted-img | libcrypto3, libssl3t64, openssl |
| CVE-2026-24051 | 2237173, 2237253, 2237349, 2242537, 2253229 | cert-manager-controller, cert-manager-webhook, f5dr-img-init, opentelemetry-collector-contri | go.opentelemetry.io/otel/sdk |
| CVE-2026-24515 | 2237541, 2237585, 2237637, 2237685, 2237733, 2237789, 2237881, 2237977, 2238025, 2238073, 2238137, 2238237, 2238293, 2242657 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libexpat1 |
| CVE-2026-25210 | 2237545, 2237589, 2237641, 2237689, 2237737, 2237793, 2237885, 2237981, 2238029, 2238077, 2238141, 2238241, 2238297, 2242661 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmrouted-img | libexpat1 |
| CVE-2026-25679 | 2236661, 2236689, 2236717, 2236745, 2236773, 2236801, 2236829, 2236857, 2236885, 2236945, 2236949, 2236953, 2236957, 2237009, 2237037, 2237121, 2237149, 2237181, 2237209, 2237237, 2237261, 2237289, 2237325, 2237357, 2237385, 2237397, 2237425, 2237453, 2237465, 2237493, 2238329, 2242477, 2242481, 2252737, 2253049, 2253537, 2254161, 2254253, 2260745 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2026-25765 | 2237301 | f5-fluentd | faraday |
| CVE-2026-2673 | 2251785, 2276389 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-26958 | 2237257 | opentelemetry-collector-contri | filippo.io/edwards25519 |
| CVE-2026-27137 | 2251777 | baseos | stdlib |
| CVE-2026-27138 | 2251789 | baseos | stdlib |
| CVE-2026-27139 | 2236665, 2236693, 2236721, 2236749, 2236777, 2236805, 2236833, 2236861, 2236889, 2236961, 2236965, 2236969, 2236973, 2237013, 2237041, 2237125, 2237153, 2237185, 2237213, 2237241, 2237265, 2237293, 2237329, 2237361, 2237389, 2237401, 2237429, 2237457, 2237469, 2237497, 2238333, 2242497, 2242501, 2252789, 2253101, 2253645, 2254213, 2254317, 2260757 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2026-27142 | 2236669, 2236697, 2236725, 2236753, 2236781, 2236809, 2236837, 2236865, 2236893, 2236977, 2236981, 2236985, 2236989, 2237017, 2237045, 2237129, 2237157, 2237189, 2237217, 2237245, 2237269, 2237297, 2237333, 2237365, 2237393, 2237405, 2237433, 2237461, 2237473, 2237501, 2238337, 2242485, 2242489, 2252785, 2253097, 2253641, 2254209, 2254313, 2260753 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc, tmm-img, tmrouted-img | stdlib |
| CVE-2026-27171 | 2237117, 2251805 | baseos, f5dr-img-init | zlib, zlib1g |
| CVE-2026-28387 | 2276413, 2277065, 2277117 | baseos, f5-blobd, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-28388 | 2276241, 2277069, 2277121 | baseos, f5-blobd, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-28389 | 2276261, 2277073, 2277125 | baseos, f5-blobd, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-28390 | 2276149, 2277077, 2277129 | baseos, f5-blobd, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-29111 | 2277033, 2277109 | baseos, f5-fluentd | libsystemd-shared, libsystemd0 |
| CVE-2026-31789 | 2276433, 2277081, 2277133 | baseos, f5-blobd, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-31790 | 2276277, 2277061, 2277113 | baseos, f5-blobd, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-32280 | 2275017, 2275045, 2275081, 2275197, 2275325, 2275469, 2275581, 2275681, 2275805, 2275921, 2276037, 2276165, 2276533, 2276557, 2276585, 2276617, 2276641, 2276665, 2276709, 2276737, 2276765, 2276789, 2276813, 2276837, 2276861, 2276889, 2276893, 2276941, 2277085 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-32281 | 2275029, 2275053, 2275113, 2275237, 2275381, 2275505, 2275609, 2275721, 2275841, 2275961, 2276065, 2276289, 2276541, 2276569, 2276601, 2276625, 2276649, 2276681, 2276721, 2276749, 2276773, 2276797, 2276821, 2276845, 2276873, 2276909, 2276913, 2276949, 2277093 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-32282 | 2275021, 2275049, 2275093, 2275213, 2275341, 2275481, 2275593, 2275697, 2275821, 2275937, 2276045, 2276181, 2276537, 2276561, 2276589, 2276621, 2276645, 2276669, 2276713, 2276741, 2276769, 2276793, 2276817, 2276841, 2276865, 2276897, 2276901, 2276945, 2277089 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-32283 | 2275041, 2275065, 2275165, 2275293, 2275433, 2275553, 2275653, 2275773, 2275889, 2276009, 2276105, 2276457, 2276553, 2276581, 2276613, 2276637, 2276661, 2276705, 2276733, 2276761, 2276785, 2276809, 2276833, 2276857, 2276885, 2276933, 2276937, 2276961, 2277105 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-32285 | 2260765 | opentelemetry-collector-contri | github.com/buger/jsonparser |
| CVE-2026-32287 | 2260769 | opentelemetry-collector-contri | github.com/antchfx/xpath |
| CVE-2026-32288 | 2275033, 2275057, 2275129, 2275253, 2275397, 2275521, 2275621, 2275733, 2275857, 2275973, 2276077, 2276309, 2276545, 2276573, 2276605, 2276629, 2276653, 2276685, 2276725, 2276753, 2276777, 2276801, 2276825, 2276849, 2276877, 2276917, 2276921, 2276953, 2277097 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-32289 | 2275037, 2275061, 2275141, 2275269, 2275409, 2275529, 2275633, 2275745, 2275869, 2275989, 2276089, 2276325, 2276549, 2276577, 2276609, 2276633, 2276657, 2276689, 2276729, 2276757, 2276781, 2276805, 2276829, 2276853, 2276881, 2276925, 2276929, 2276957, 2277101 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-33186 | 2252793, 2252853, 2253217, 2253301, 2253377, 2253437, 2253501, 2253505, 2253509, 2253649, 2253713, 2253841, 2253917, 2254325, 2254421, 2254509, 2254709, 2254773, 2254869 | cert-manager-controller, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contri | google.golang.org/grpc |
| CVE-2026-33997 | 2260777 | opentelemetry-collector-contri | github.com/docker/docker |
| CVE-2026-34040 | 2260773 | opentelemetry-collector-contri | github.com/docker/docker |
| CVE-2026-3497 | 2242593 | f5-debug-sidecar | openssh-client |
| CVE-2026-34986 | 2275025, 2275357, 2276565, 2276593, 2276673, 2276717, 2276869, 2276905 | cert-manager-controller, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5ingress, opentelemetry-collector-contri, spk-cwc | github.com/go-jose/go-jose/v4 |
| CVE-2026-3731 | 2242597, 2242613 | f5-debug-sidecar, f5-dssm-upgrader | libssh-4 |
| CVE-2026-3783 | 2242601, 2242617 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-3784 | 2242605, 2242621 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-39882 | 2276693 | opentelemetry-collector-contri | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp |
| CVE-2026-39883 | 2276597, 2276677, 2276745 | cert-manager-controller, cert-manager-webhook, opentelemetry-collector-contri | go.opentelemetry.io/otel/sdk |
| CVE-2026-40179 | 2276349 | f5dr-img-init | github.com/prometheus/prometheus |
| CVE-2026-40200 | 2276477 | f5dr-img-init | musl |
| CVE-2026-4105 | 2251793 | baseos | libsystemd0 |
| CVE-2026-4878 | 2276369 | f5dr-img-init | libcap2 |
| CVE-2026-6042 | 2276497 | f5dr-img-init | musl |