CVE-2026-41954

MediumCVSS 4.9/10Last modified Jun 24, 2026

Description

Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2026
Last modified: Jun 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-419567.5When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM)CVE-2026-419578.8An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility. No CVE-2026-419586.5A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)).CVE-2026-419596.5Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics commands and in BIG-IP iCon CVE-2026-41969.8A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS CVE-2026-419605.8Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419615.9Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419623.6Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vulnerability may affect CVE-2026-419632.8Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419648.4Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419655.6Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419665.6Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service conf