F5 BIG-IP, BIG-IQ Privilege Escalation: CVE-2026-40698

The National Vulnerability Database (NVD) has detailed CVE-2026-40698, a high-severity privilege escalation vulnerability impacting F5 BIG-IP and BIG-IQ systems. This flaw, rated 8.7 CVSS, allows a highly privileged, authenticated attacker with at least the Resource Administrator role to craft SNMP configuration objects via iControl REST or the TMOS shell (tmsh). This manipulation ultimately leads to elevated privileges within the system.

This isn’t a zero-day for the casual attacker, but it’s a critical issue for internal security. An attacker who has already breached perimeter defenses and gained a foothold as a Resource Administrator can leverage this to escalate their access. The attacker’s calculus here is straightforward: move laterally, gain higher privileges, and expand control over critical network infrastructure. This vulnerability directly enables that.

For defenders, the immediate concern is internal segmentation and monitoring. While F5 has not specified affected versions beyond noting that End of Technical Support (EoTS) versions are not evaluated, assume broad applicability across active versions. Focus on robust authentication controls for privileged accounts and stringent monitoring of iControl REST and tmsh activity, particularly for SNMP configuration changes. This is a clear reminder that ‘highly privileged’ access is still a target for further escalation.