CVE-2022-1388
F5 BIG-IP Missing Authentication Vulnerability
CVSS
—
No CVSS
EPSS
100.0%
p100
KEV
YES
May 10, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
100.0%EPSS · 30 days100.0%
2026-06-302026-07-16
Product
F5 / BIG-IP
Vulnerability
F5 BIG-IP Missing Authentication Vulnerability
Added to KEV
May 10, 2022
Remediate by
May 31, 2022
Known ransomware use
Yes
Summary description
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2022-1388