---
id: 4077
title: "[CVE-2021-22986] Emerging Threat Notification: F5 Networks Vulnerabilities for BIG-IP and BIG-IQ Products"
cve: CVE-2021-22986
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/f5-networks-big-ip-big-iq-advisory"
published_at: "2021-03-11T00:00:00Z"
tags: ["rce", "vulnerability", "advisory", "f5", "big-ip", "big-iq", "cve-2021-22986"]
phying_url: "https://phying.com/item/4077"
lang: en
---

# [CVE-2021-22986] Emerging Threat Notification: F5 Networks Vulnerabilities for BIG-IP and BIG-IQ Products

## Summary

F5 released fixes for seven BIG-IP and BIG-IQ vulnerabilities, headlined by critical unauthenticated RCE CVE-2021-22986 in iControl REST, found by Google's Project Zero; a PoC is public.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2021-22986
- **Published:** 2021-03-11T00:00:00Z
- **Original:** https://bishopfox.com/blog/f5-networks-big-ip-big-iq-advisory
- **Phying News:** https://phying.com/item/4077