CVE-2024-28132 BIG-IP NEXT CNF vulnerability

What is CVE-2024-28132?

CVE-2024-28132 is a medium-severity vulnerability in F5 BIG-IP Next CNF, published on 8 May 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness: CWE-922

Which versions are affected by CVE-2024-28132?

It affects 1 product.

Products include F5 Big-Ip Next Cloud-Native Network Functions.

How do I fix CVE-2024-28132?

No fix has been published for CVE-2024-28132 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-28132 being exploited?

There is no known exploitation of CVE-2024-28132 in the wild and no public exploit code.

Other vulnerabilities in F5 BIG-IP Next CNF

• CVE-2026-59762 BIG-IP HTTP/2 vulnerability High 8.7
• CVE-2025-54479 BIG-IP PEM vulnerability High 8.7
• CVE-2025-58120 BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability High 8.7
• CVE-2025-60016 BIG-IP SSL/TLS vulnerability High 8.7
• CVE-2025-61974 BIG-IP SSL/TLS vulnerability High 8.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hwq4-p9m3-4cjm.