Live › vulnerability › CVE-2020-5902
Go to dashboardF5 BIG-IP's Traffic Management User Interface (TMUI) has a remote code execution flaw in undisclosed pages. An unauthenticated attacker on the network can run code on the appliance, and CISA reports it is being exploited in the wild, including in ransomware campaigns.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| F5 BIG-IP | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the F5 vendor updates for BIG-IP per the vendor advisory referenced by CISA (the sources do not list the fixed versions).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.
This page as .md · .json · in your agent: get_signal("CVE-2020-5902")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.