F5 BIG-IP and BIG-IQ Vulnerabilities Patched: NCSC Advisory 2026-0162 (advisories.ncsc.nl)

• Directory traversal fixed in iControl REST
• Privilege escalation patched in TMOS Shell
• Multiple issues resolved in Access Policy Manager

"What changed: NCSC-NL issued advisory NCSC-2026-0162 detailing multiple vulnerabilities in F5 BIG-IP and BIG-IQ products. Patches address directory traversal in iControl REST, privilege escalation in TMOS Shell, and issues in Access Policy Manager. Administrators are urged to apply updates immediately. The vulnerabilities affect widely-used network infrastructure components, posing risks of unauthorized access and escalation. Organizations should prioritize patching."