SEPTEMBER 9, 2026
Live Feed
Back to database
Case File

CVE-2026-59762

HIGH · CVSS 7.5 EPSS 0.46%

Source: NVD + CISA KEV + EPSS · Published 2026-07-15 · Last synced 2026-08-14

CyberRota Analysis

AI-Generated

BIG-IP systems with an HTTP/2 profile configured are vulnerable to a memory resource utilization issue that can be exploited by remote, unauthenticated attackers. This vulnerability can lead to service degradation and potential denial-of-service (DoS) conditions, requiring manual or forced restarts of the TMM process. Organizations using BIG-IP should prioritize remediation to maintain system performance and availability.

CVE
CVE-2026-59762
Severity
HIGH
CVSS
7.5
EPSS
0.46%
BIG-IP

Original NVD Description

When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.   Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote, unauthenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Related CVEs

Other vulnerabilities affecting the same vendor(s)