CVE-2026-59762

HighCVSS 7.5/10Last modified Aug 6, 2026

Description

When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.

Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote, unauthenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published: Jul 15, 2026
Last modified: Aug 6, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-597634.3Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads CVE-2026-597648.6ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is explo CVE-2026-597657.5SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata CVE-2026-597664.3Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returning data associated wi CVE-2026-597699.1FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, CVE-2026-59779.8A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setWiFiBasicCfg of the file /cgi-bin/cste CVE-2026-597749.8Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server CVE-2026-597767.0Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is expl CVE-2026-59789.8A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setWiFiAclRules of the file /c CVE-2026-597807.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authentication plugin while listing LDA CVE-2026-597817.8When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory CVE-2026-597826.9The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap da