# F5 Big-Ip Carrier-Grade Nat


- [CVE-2023-46747](https://insights.sbomify.com/CVE-2023-46747/): F5 BIG-IP Configuration Utility Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2023-46748](https://insights.sbomify.com/CVE-2023-46748/): F5 BIG-IP Configuration Utility SQL Injection (high 8.8, exploited in the wild)
- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2025-20058](https://insights.sbomify.com/CVE-2025-20058/): BIG-IP message routing vulnerability (high 8.9)
- [CVE-2025-21087](https://insights.sbomify.com/CVE-2025-21087/): TMM Vulnerability (high 8.9)
- [CVE-2023-41373](https://insights.sbomify.com/CVE-2023-41373/): BIG-IP Configuration Utility vulnerability (high 8.8)
- [CVE-2026-39455](https://insights.sbomify.com/CVE-2026-39455/): BIG-IP Configuration utility vulnerability (high 8.7)
- [CVE-2026-39458](https://insights.sbomify.com/CVE-2026-39458/): BIG-IP DNS Cache vulnerability (high 8.7)
- [CVE-2026-40423](https://insights.sbomify.com/CVE-2026-40423/): BIG-IP SIP profile vulnerability (high 8.7)
- [CVE-2026-40618](https://insights.sbomify.com/CVE-2026-40618/): BIG-IP SSL/TLS vulnerability (high 8.7)
- [CVE-2026-40629](https://insights.sbomify.com/CVE-2026-40629/): BIG-IP SSL/TLS vulnerability (high 8.7)
- [CVE-2026-41218](https://insights.sbomify.com/CVE-2026-41218/): BIG-IP PEM iRules vulnerability (high 8.7)

---
From sbomify Insights: https://insights.sbomify.com/products/f5/big-ip-carrier-grade-nat/
