Skip to content
Sign in
8.1 High

CVE-2026-20916 An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed…

Description

An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed iControl REST endpoint on the BIG-IQ system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products and versions

Product Affected versions Fixed in
BIG-IQ 8.4 8.4.0 → < 8.4.1 8.4.1

Other CVEs of BIG-IQ

The 20 CVEs of BIG-IQ →
CVE-2026-66842 BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts… 8.8 High CVE-2026-42406 A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least… 8.7 High CVE-2026-41959 Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics… 6.5 Medium CVE-2026-42937 Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and… 6.5 Medium
Track this CVE