F5 BIG-IP Denial of Service Vulnerability

F5 BIG-IP Denial of Service Vulnerability

Release Date: 21 Sep 2026

RISK: High Risk

A vulnerability was identified in F5 BIG-IP. A remote attacker could exploit this vulnerability to trigger denial of service condition on the targeted system.

 

Note:

No patch is currently available for CVE-2026-11622 of the affected products. Hence, the risk level is rated as High Risk.

---

Impact

• Denial of Service

---

System / Technologies affected

BIG-IP (DNS)

 

• Versions 17.1.0 - 17.1.3
• Versions 17.5.0 - 17.5.1
• Versions 21.1.0

 

---

Solutions

Workaround:

Mitigate the vulnerability by the following workaround:

 

• Disable DNSSEC in a validating resolver DNS cache
• Switch to a Resolver or Transparent cache type
• Disable the Use BIND Server on BIG-IP option on the DNS profile

 

Please visit the vendor web-site for more details.

 

Apply workarounds issued by the vendor:

• https://my.f5.com/manage/s/article/K000163335

---

Vulnerability Identifier

• CVE-2026-11622

---

Source

• F5

---

Related Link

• https://my.f5.com/manage/s/article/K000163335