F5 BIG-IP Next SPK

23 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-59762≥ 1.9.0 ; 1.7.0 – < 1.7.18BIG-IP HTTP/2 vulnerabilityHIGH 8.70.6 %
CVE-2026-424092.0.0 – < 2.0.3 ; 1.7.0 – < 1.7.17BIG-IP HTTP/2 vulnerabilityHIGH 8.70.3 %
CVE-2026-40618≥ 2.0.0 ; ≥ 1.7.0BIG-IP SSL/TLS vulnerabilityHIGH 8.70.3 %
CVE-2026-406292.0.0 – < 2.0.3 ; 1.7.0 – < 1.7.16BIG-IP SSL/TLS vulnerabilityHIGH 8.70.3 %
CVE-2025-61990≥ 2.0.0 ; ≥ 1.9.0 ; ≥ 1.8.0 ; …TMM vulnerabilityHIGH 8.70.3 %
CVE-2025-61974≥ 2.0.0 ; ≥ 1.9.0 ; ≥ 1.8.0 ; …BIG-IP SSL/TLS vulnerabilityHIGH 8.70.5 %
CVE-2025-581202.0.0 – < 2.0.1 ; ≥ 1.9.0 ; ≥ 1.8.0 ; …BIG-IP Next (CNF, SPK, and Kubernetes) vulnerabilityHIGH 8.70.3 %
CVE-2025-55670≥ 1.7.0BIG-IP Next (CNF, SPK, and Kubernetes) vulnerabilityHIGH 7.10.3 %
CVE-2025-54805≥ 1.7.0TMM VulnerabilityMEDIUM 6.00.3 %
CVE-2025-46706≥ 1.7.0BIG-IP iRules vulnerabilityHIGH 8.70.4 %
CVE-2025-60016≥ 1.7.0BIG-IP SSL/TLS vulnerabilityHIGH 8.70.4 %
CVE-2025-48008≥ 1.7.0BIG-IP MPTCP vulnerabilityHIGH 8.70.4 %
CVE-2025-54500≥ 2.0.0 ; ≥ 1.7.0HTTP/2 VulnerabilityMEDIUM 6.90.5 %
CVE-2025-414141.8.0 – < 2.0.0 ; 1.7.0 – < 1.7.9BIG-IP HTTP/2 vulnerabilityHIGH 8.70.4 %
CVE-2025-365041.8.0 – < 2.0.0 ; ≥ 1.7.0BIG-IP HTTP/2 vulnerabilityHIGH 8.70.4 %
CVE-2025-413991.8.0 – < 2.0.0 ; 1.7.0 – < 1.7.12SCTP VulnerabilityHIGH 8.70.4 %
CVE-2025-365571.8.0 – < 2.0.0 ; 1.7.0 – < 1.7.9BIG-IP HTTP vulnerabilityHIGH 8.70.4 %
CVE-2025-228461.8.0 – < 1.9.1 ; 1.7.0 – < 1.7.7BIG-IP SIP VulnerabilityHIGH 8.70.4 %
CVE-2024-411641.5.0 – < 1.9.0BIG-IP MPTCP vulnerabilityHIGH 8.20.4 %
CVE-2024-233141.5.0 – < 1.8.1BIG-IP HTTP/2 vulnerabilityHIGH 7.50.5 %
CVE-2024-233061.3.0 – < 1.5.0BIG-IP Next CNF & SPK vulnerabilityHIGH 7.10.2 %
CVE-2023-452261.5.0 – < 1.6.0BIG-IP Next SPK SSH vulnerabilityHIGH 7.40.5 %
CVE-2023-40534≥ 1.6.0BIG-IP HTTP/2 vulnerabilityHIGH 7.50.7 %