Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-24464

No fix known EPSS <1%CVSS 6.8

When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Published 2026-05-13 · CVE record · OSV

Products: F5 BIG-IP