Security updates¶
(No F5 security updates)
List of other CVEs¶
| CVE Number | Bug IDs | Image Names | Package Name |
|---|---|---|---|
| CVE-2025-13462 | 2276965, 2276969, 2276973, 2276977, 2276981, 2276985, 2276989, 2276993, 2276997, 2277001, 2277045, 2277053, 2277057 | f5-blobd, f5-coremond, f5-csm-qkview, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-47911 | 2378349, 2378385, 2379121 | f5-coremond, f5-version-validator, init-certmgr | golang.org/x/net |
| CVE-2025-58190 | 2378353, 2378389, 2379125 | f5-coremond, f5-version-validator, init-certmgr | golang.org/x/net |
| CVE-2026-10536 | 2379721 | f5-debug-sidecar | curl |
| CVE-2026-11822 | 2379549, 2379557, 2379565, 2379573, 2379581, 2379589, 2379597, 2379605, 2379613, 2379657, 2379665, 2379673, 2379689, 2379697 | f5-blobd, f5-coremond, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmrouted-img | libsqlite3-0 |
| CVE-2026-11824 | 2379553, 2379561, 2379569, 2379577, 2379585, 2379593, 2379601, 2379609, 2379617, 2379661, 2379669, 2379677, 2379693, 2379701 | f5-blobd, f5-coremond, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmrouted-img | libsqlite3-0 |
| CVE-2026-11856 | 2379621, 2379705 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-12064 | 2379637, 2379725 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-1703 | 2237305 | f5-fluentd | pip |
| CVE-2026-2219 | 2251781 | baseos | dpkg |
| CVE-2026-2297 | 2310265, 2310269, 2310277, 2310281, 2310285, 2310333, 2310337, 2310341, 2310345, 2310381, 2310385, 2310389, 2310393, 2310397, 2310401 | f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2026-2303 | 2378121, 2379157 | f5-toda-tmstatsd, opentelemetry-collector-contri | go.mongodb.org/mongo-driver, go.mongodb.org/mongo-driver/v2 |
| CVE-2026-25680 | 2377985, 2378029, 2378057, 2378125, 2378181, 2378213, 2378277, 2378321, 2378357, 2378393, 2378457, 2378537, 2378645, 2378725, 2378769, 2378833, 2378913, 2379077, 2379129, 2379161, 2379225, 2379389, 2379393, 2379397, 2379401 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-coremond, f5-debug-sidecar, f5-downloader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, spk-cwc | golang.org/x/net |
| CVE-2026-25681 | 2377933, 2378013, 2378041, 2378069, 2378165, 2378197, 2378225, 2378305, 2378333, 2378369, 2378405, 2378485, 2378593, 2378673, 2378753, 2378781, 2378861, 2379025, 2379105, 2379141, 2379173, 2379257, 2379261, 2379265, 2379269 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-coremond, f5-debug-sidecar, f5-downloader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, spk-cwc | golang.org/x/net |
| CVE-2026-27135 | 2310349, 2310405 | f5-debug-sidecar, f5-dssm-upgrader | libnghttp2-14 |
| CVE-2026-27136 | 2377937, 2378017, 2378045, 2378073, 2378169, 2378201, 2378229, 2378309, 2378337, 2378373, 2378409, 2378489, 2378597, 2378677, 2378757, 2378785, 2378865, 2379029, 2379109, 2379145, 2379177, 2379273, 2379277, 2379285, 2379289 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-coremond, f5-debug-sidecar, f5-downloader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, spk-cwc | golang.org/x/net |
| CVE-2026-27145 | 2316401, 2316413, 2316425, 2316449, 2316461, 2316473, 2316485, 2316497, 2316509, 2316521, 2316533, 2316545, 2316557, 2316569, 2316593, 2316605, 2316617, 2316629, 2316641, 2316653, 2316665, 2316677, 2316689, 2316701, 2316773, 2334417, 2334421, 2379293 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-3039 | 2310413 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-3219 | 2310253 | f5-fluentd | pip |
| CVE-2026-32952 | 2309705, 2309741, 2309809, 2309945 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook | github.com/Azure/go-ntlmssp |
| CVE-2026-33637 | 2310257 | f5-fluentd | faraday |
| CVE-2026-33811 | 2309233, 2309265, 2309297, 2309361, 2309417, 2309449, 2309481, 2309513, 2309545, 2309577, 2309609, 2309641, 2309673, 2309709, 2309777, 2309813, 2309845, 2309877, 2309913, 2309949, 2309981, 2310025, 2310057, 2310089, 2310121, 2310125, 2310129, 2310133, 2310461, 2334353, 2334357, 2379297 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-33814 | 2309237, 2309269, 2309301, 2309365, 2309421, 2309453, 2309485, 2309517, 2309549, 2309581, 2309613, 2309645, 2309677, 2309713, 2309781, 2309817, 2309849, 2309881, 2309917, 2309985, 2310029, 2310061, 2310093, 2310137, 2310141, 2310145, 2310149, 2310465, 2334361, 2334365, 2379301 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-33845 | 2310497 | baseos | libgnutls30t64 |
| CVE-2026-33846 | 2310501 | baseos | libgnutls30t64 |
| CVE-2026-34180 | 2334313, 2334465 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-34181 | 2334317 | f5dr-img-init | libcrypto3 |
| CVE-2026-34182 | 2334297, 2334453 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-34183 | 2334301 | f5dr-img-init | libcrypto3 |
| CVE-2026-34743 | 2310273, 2310577 | baseos, rabbit | liblzma5, xz-utils |
| CVE-2026-35469 | 2309885, 2310153 | f5-debug-sidecar, f5-downloader | github.com/moby/spdystream |
| CVE-2026-3592 | 2310417 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-3832 | 2310505 | baseos | libgnutls30t64 |
| CVE-2026-3833 | 2310509 | baseos | libgnutls30t64 |
| CVE-2026-39820 | 2309241, 2309273, 2309305, 2309369, 2309425, 2309457, 2309489, 2309521, 2309553, 2309585, 2309617, 2309649, 2309681, 2309717, 2309785, 2309821, 2309853, 2309889, 2309921, 2309957, 2309989, 2310033, 2310065, 2310097, 2310157, 2310161, 2310165, 2310169, 2310469, 2334369, 2334373, 2379305 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-39821 | 2377941, 2378021, 2378049, 2378077, 2378173, 2378205, 2378233, 2378313, 2378341, 2378377, 2378413, 2378493, 2378601, 2378681, 2378761, 2378789, 2378869, 2379033, 2379113, 2379149, 2379181, 2379309, 2379313, 2379317, 2379321 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-coremond, f5-debug-sidecar, f5-downloader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, spk-cwc | golang.org/x/net |
| CVE-2026-39823 | 2309245, 2309277, 2309309, 2309373, 2309429, 2309461, 2309493, 2309525, 2309557, 2309589, 2309621, 2309653, 2309685, 2309721, 2309789, 2309825, 2309857, 2309893, 2309925, 2309961, 2309993, 2310037, 2310069, 2310101, 2310173, 2310177, 2310181, 2310185, 2310473, 2334377, 2334381, 2379409 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-39824 | 2378009, 2378037, 2378065, 2378161, 2378189, 2378193, 2378221, 2378301, 2378329, 2378365, 2378401, 2378481, 2378561, 2378669, 2378749, 2378777, 2378857, 2378941, 2379101, 2379137, 2379169, 2379253, 2379457, 2379461 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-debug-sidecar, f5-downloader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, spk-cwc | golang.org/x/sys |
| CVE-2026-39825 | 2309249, 2309281, 2309313, 2309377, 2309433, 2309465, 2309497, 2309529, 2309561, 2309593, 2309625, 2309657, 2309689, 2309725, 2309793, 2309829, 2309861, 2309897, 2309929, 2309965, 2309997, 2310041, 2310073, 2310105, 2310189, 2310193, 2310197, 2310201, 2310477, 2334385, 2334389, 2379413 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-39826 | 2309253, 2309285, 2309317, 2309381, 2309437, 2309469, 2309501, 2309533, 2309565, 2309597, 2309629, 2309661, 2309693, 2309729, 2309797, 2309833, 2309865, 2309901, 2309933, 2309969, 2310001, 2310045, 2310077, 2310109, 2310205, 2310209, 2310213, 2310217, 2310481, 2334425, 2334429, 2379417 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-39827 | 2377945, 2378081, 2378237, 2378417, 2378497, 2378605, 2378685, 2378793, 2378873, 2379037, 2379185, 2379325 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39828 | 2377949, 2378085, 2378241, 2378421, 2378501, 2378609, 2378689, 2378797, 2378877, 2379041, 2379189, 2379329 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39829 | 2377953, 2378089, 2378245, 2378425, 2378505, 2378613, 2378693, 2378801, 2378881, 2379045, 2379193, 2379333 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39830 | 2377957, 2378093, 2378249, 2378429, 2378509, 2378617, 2378697, 2378805, 2378885, 2379049, 2379197, 2379337 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39831 | 2377989, 2378129, 2378281, 2378461, 2378541, 2378649, 2378729, 2378837, 2378917, 2379081, 2379229, 2379421 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39832 | 2377961, 2378097, 2378253, 2378433, 2378513, 2378621, 2378701, 2378809, 2378889, 2379053, 2379201, 2379341 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39833 | 2377993, 2378133, 2378285, 2378465, 2378545, 2378653, 2378733, 2378841, 2378921, 2379085, 2379233, 2379425 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39834 | 2377997, 2378137, 2378289, 2378469, 2378549, 2378657, 2378737, 2378845, 2378925, 2379089, 2379241, 2379429 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39835 | 2377965, 2378101, 2378257, 2378437, 2378517, 2378625, 2378705, 2378813, 2378893, 2379057, 2379205, 2379345 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39836 | 2309257, 2309289, 2309321, 2309385, 2309441, 2309473, 2309505, 2309537, 2309569, 2309601, 2309633, 2309665, 2309697, 2309733, 2309801, 2309837, 2309869, 2309905, 2309937, 2309973, 2310005, 2310049, 2310081, 2310113, 2310221, 2310225, 2310229, 2310233, 2310485, 2334393, 2334397, 2379349 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-40179 | 2276697 | opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-40226 | 2334441, 2334457 | baseos, f5-fluentd | libsystemd-shared, libsystemd0 |
| CVE-2026-41602 | 2309389 | opentelemetry-collector-contri | github.com/apache/thrift |
| CVE-2026-41889 | 2309413 | opentelemetry-collector-contri | github.com/jackc/pgx/v5 |
| CVE-2026-41989 | 2310517 | baseos | libgcrypt20 |
| CVE-2026-42009 | 2310521 | baseos | libgnutls30t64 |
| CVE-2026-42010 | 2310525 | baseos | libgnutls30t64 |
| CVE-2026-42011 | 2310529 | baseos | libgnutls30t64 |
| CVE-2026-42012 | 2310533 | baseos | libgnutls30t64 |
| CVE-2026-42013 | 2310537 | baseos | libgnutls30t64 |
| CVE-2026-42014 | 2310541 | baseos | libgnutls30t64 |
| CVE-2026-42015 | 2310545 | baseos | libgnutls30t64 |
| CVE-2026-42151 | 2309393, 2310009 | f5dr-img-init, opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-42154 | 2309397, 2310013 | f5dr-img-init, opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-42246 | 2379745 | f5-fluentd | net-imap |
| CVE-2026-42257 | 2379749 | f5-fluentd | net-imap |
| CVE-2026-42496 | 2379757 | baseos | perl-base |
| CVE-2026-42499 | 2309261, 2309293, 2309325, 2309401, 2309445, 2309477, 2309509, 2309541, 2309573, 2309605, 2309637, 2309669, 2309701, 2309737, 2309805, 2309841, 2309873, 2309909, 2309941, 2309977, 2310017, 2310053, 2310085, 2310117, 2310237, 2310241, 2310245, 2310249, 2310489, 2334401, 2334405, 2379353 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-42502 | 2377969, 2378025, 2378053, 2378105, 2378177, 2378209, 2378261, 2378317, 2378345, 2378381, 2378441, 2378521, 2378629, 2378709, 2378765, 2378817, 2378897, 2379061, 2379117, 2379153, 2379209, 2379357, 2379361, 2379365, 2379369 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-coremond, f5-debug-sidecar, f5-downloader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, spk-cwc | golang.org/x/net |
| CVE-2026-42504 | 2316397, 2316409, 2316421, 2316445, 2316457, 2316469, 2316481, 2316493, 2316505, 2316517, 2316529, 2316541, 2316553, 2316565, 2316589, 2316601, 2316613, 2316625, 2316637, 2316649, 2316661, 2316673, 2316685, 2316697, 2316709, 2316713, 2316717, 2316721, 2316769, 2334409, 2334413, 2379373 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-42506 | 2378001, 2378033, 2378061, 2378141, 2378185, 2378217, 2378293, 2378325, 2378361, 2378397, 2378473, 2378553, 2378661, 2378741, 2378773, 2378849, 2378933, 2379093, 2379133, 2379165, 2379245, 2379433, 2379437, 2379441, 2379445 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-coremond, f5-debug-sidecar, f5-downloader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, spk-cwc | golang.org/x/net |
| CVE-2026-42507 | 2316405, 2316417, 2316429, 2316453, 2316465, 2316477, 2316489, 2316501, 2316513, 2316525, 2316537, 2316549, 2316561, 2316573, 2316597, 2316609, 2316621, 2316633, 2316645, 2316657, 2316669, 2316681, 2316693, 2316705, 2316777, 2334433, 2334437, 2379449 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contri, rabbit, spk-cwc | stdlib |
| CVE-2026-42508 | 2377973, 2378109, 2378265, 2378445, 2378525, 2378633, 2378713, 2378821, 2378901, 2379065, 2379213, 2379377 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-42602 | 2309405 | opentelemetry-collector-contri | otel |
| CVE-2026-42764 | 2334305 | f5dr-img-init | libcrypto3 |
| CVE-2026-42766 | 2334321, 2334473 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-42767 | 2334325, 2334477 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-42768 | 2334329 | f5dr-img-init | libcrypto3 |
| CVE-2026-42769 | 2334333 | f5dr-img-init | libcrypto3 |
| CVE-2026-42770 | 2334337, 2334481 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-44024 | 2379465 | f5-fluentd | fluentd |
| CVE-2026-44025 | 2379473 | f5-fluentd | fluentd |
| CVE-2026-44160 | 2379477 | f5-fluentd | fluentd |
| CVE-2026-44161 | 2379481 | f5-fluentd | fluentd |
| CVE-2026-44903 | 2309409, 2310021 | f5dr-img-init, opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-45445 | 2334309, 2334461 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-45446 | 2334341, 2334485 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-45447 | 2334293, 2334449 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-46595 | 2377977, 2378113, 2378269, 2378449, 2378529, 2378637, 2378717, 2378825, 2378905, 2379069, 2379217, 2379381 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-46597 | 2377981, 2378117, 2378273, 2378453, 2378533, 2378641, 2378721, 2378829, 2378909, 2379073, 2379221, 2379385 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-46598 | 2378005, 2378145, 2378297, 2378477, 2378557, 2378665, 2378745, 2378853, 2378937, 2379097, 2379249, 2379453 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-47256 | 2378149 | opentelemetry-collector-contri | otel |
| CVE-2026-48496 | 2378153 | opentelemetry-collector-contri | go.opentelemetry.io/ebpf-profiler |
| CVE-2026-4873 | 2310369, 2310445 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-4878 | 2310557 | baseos | libcap2 |
| CVE-2026-5260 | 2310561 | baseos | libgnutls30t64 |
| CVE-2026-54171 | 2379533 | f5-fluentd | excon |
| CVE-2026-5419 | 2310565 | baseos | libgnutls30t64 |
| CVE-2026-54297 | 2379485 | f5-fluentd | faraday |
| CVE-2026-54500 | 2379537 | f5-fluentd | oj |
| CVE-2026-54502 | 2379489 | f5-fluentd | oj |
| CVE-2026-54522 | 2379545 | f5-fluentd | msgpack |
| CVE-2026-54592 | 2379493 | f5-fluentd | oj |
| CVE-2026-54896 | 2379497 | f5-fluentd | oj |
| CVE-2026-54897 | 2379501 | f5-fluentd | oj |
| CVE-2026-54898 | 2379505 | f5-fluentd | oj |
| CVE-2026-54899 | 2379509 | f5-fluentd | oj |
| CVE-2026-54900 | 2379513 | f5-fluentd | oj |
| CVE-2026-54901 | 2379517 | f5-fluentd | oj |
| CVE-2026-54902 | 2379521 | f5-fluentd | oj |
| CVE-2026-54903 | 2379525 | f5-fluentd | oj |
| CVE-2026-54904 | 2379529 | f5-fluentd | concurrent-ruby |
| CVE-2026-54905 | 2379541 | f5-fluentd | concurrent-ruby |
| CVE-2026-54906 | 2379469 | f5-fluentd | concurrent-ruby |
| CVE-2026-5545 | 2310353, 2310421 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-55701 | 2378157 | opentelemetry-collector-contri | otel |
| CVE-2026-5704 | 2310569 | baseos | tar |
| CVE-2026-5773 | 2310373, 2310449 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-5946 | 2310425 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-5950 | 2310429 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-5958 | 2310573 | baseos | sed |
| CVE-2026-6253 | 2310357, 2310433 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-6276 | 2310377, 2310453 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-6357 | 2310261 | f5-fluentd | pip |
| CVE-2026-6429 | 2310361, 2310437 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-6472 | 2310289 | f5-fluentbit | libpq5 |
| CVE-2026-6473 | 2310293 | f5-fluentbit | libpq5 |
| CVE-2026-6474 | 2310297 | f5-fluentbit | libpq5 |
| CVE-2026-6475 | 2310301 | f5-fluentbit | libpq5 |
| CVE-2026-6476 | 2310305 | f5-fluentbit | libpq5 |
| CVE-2026-6477 | 2310309 | f5-fluentbit | libpq5 |
| CVE-2026-6478 | 2310313 | f5-fluentbit | libpq5 |
| CVE-2026-6479 | 2310317 | f5-fluentbit | libpq5 |
| CVE-2026-6575 | 2310321 | f5-fluentbit | libpq5 |
| CVE-2026-6637 | 2310325 | f5-fluentbit | libpq5 |
| CVE-2026-6638 | 2310329 | f5-fluentbit | libpq5 |
| CVE-2026-6653 | 2379709 | f5-debug-sidecar | libxml2 |
| CVE-2026-6842 | 2316761 | f5-debug-sidecar | nano |
| CVE-2026-6843 | 2316765 | f5-debug-sidecar | nano |
| CVE-2026-7168 | 2310365, 2310441 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-7383 | 2334345, 2334489 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-8286 | 2379641, 2379729 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-8376 | 2379761 | baseos | perl-base |
| CVE-2026-8458 | 2379645, 2379733 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-8924 | 2379649, 2379737 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-8925 | 2379625, 2379713 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-8927 | 2379629, 2379717 | f5-debug-sidecar, f5-dssm-upgrader | curl |
| CVE-2026-9076 | 2334349, 2334493 | baseos, f5dr-img-init | libcrypto3, libssl3t64 |
| CVE-2026-9547 | 2379653, 2379741 | f5-debug-sidecar, f5-dssm-upgrader | curl |