CVE-2026-42408

MediumCVSS 4.4/10Last modified Jun 23, 2026

Description

When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) command that may allow a highly privileged authenticated attacker to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published
May 13, 2026
Last modified
Jun 23, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-424097.5When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed rCVE-2026-42416.3A vulnerability was identified in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /adminCVE-2026-424106.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (forCVE-2026-424118.1Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.CVE-2026-424126.5Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels. ThiCVE-2026-424137.5Unauthenticated Sensitive Data Exposure in Snapshotify &#8211; All-in-One Backup &amp; Restore &amp; Migrate <= 1.3.2 versions.CVE-2026-424148.5Subscriber SQL Injection in ListingPro <= 2.9.12 versions.CVE-2026-424159.3Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.CVE-2026-424168.5Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.CVE-2026-424179.3Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.CVE-2026-424187.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Social Rocket social-rockCVE-2026-424195.9Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.