CVE-2026-42930 - Vulnerability Analysis
HighCVSS: 8.7Last Updated: May 13, 2026
BIG-IP - Authentication Bypass
Overview
BIG-IP contains an authentication bypass caused by improper enforcement of Appliance mode restrictions, letting authenticated attackers with Administrator role bypass Appliance mode restrictions.
Severity & Score
Impact
Authenticated administrators can bypass Appliance mode restrictions, potentially compromising system security.
Mitigation
Update to the latest supported version.
Social Media Activity(2 posts)
š CVE-2026-42930 - High (8.7) When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system. Note: Software versions which have reached End of Technical Support (EoTS) are not... š https://www.thehackerwire.com/vulnerability/CVE-2026-42930/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original post
š CVE-2026-42930 - High (8.7) When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system. Note: Software versions which have reached End of Technical Support (EoTS) are not... š https://www.thehackerwire.com/vulnerability/CVE-2026-42930/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postRelated Resources
Details
- CVE ID
- CVE-2026-42930
- Severity
- High
- CVSS Score
- 8.7
- Type
- broken_authentication
- Status
- unconfirmed
- EPSS
- 2.6%
- Social Posts
- 2
CWE
- CWE-35
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N