File and Path Handling

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. F5 BIG-IP TMUI - Remote Code ExecutionCVE-2020-5902F5 · CVSS 9.8 · 100% likely

   CWE-22BackdoorDiplomacy

2. BIG-IP Configuration Utility vulnerabilityCVE-2023-41373F5 · CVSS 8.8 · 2.3% likely

   CWE-22

3. BIG-IP APM Appliance mode vulnerability CVE-2022-31473CVE-2022-31473F5 · CVSS 6.8 · 2.1% likely

   CWE-22

4. On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x a…CVE-2022-26835F5 · CVSS 4.9 · 1.9% likely

   CWE-22

5. On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x a…CVE-2022-29474F5 · CVSS 4.3 · 1.6% likely

   CWE-22

6. BIG-IP Configuration utility vulnerabilityCVE-2025-54755F5 · CVSS 4.9 · 1.2% likely

   CWE-22

7. BIG-IP Configuration utility vulnerabilityCVE-2023-28406F5 · CVSS 4.3 · 1.2% likely

   CWE-22

8. BIG-IP SSL Orchestrator vulnerabilityCVE-2026-42780F5 · CVSS 4.9 · 0.9% likely

   CWE-22

9. Appliance mode iControl REST vulnerabilityCVE-2026-24464F5 · CVSS 6.8 · 0.9% likely

   CWE-35

10. F5OS CLI vulnerability CVE-2022-41780CVE-2022-41780F5 · CVSS 5.5 · 0.5% likely

    CWE-22

11. F5OS QKView utility vulnerabilityCVE-2024-23607F5 · CVSS 5.5 · 0.5% likely

    CWE-22

12. Appliance mode iControl REST vulnerabilityCVE-2026-42930F5 · CVSS 8.7 · 0.5% likely

    CWE-35

13. NGINX Agent VulnerabilityCVE-2024-7634F5 · CVSS 4.9 · 0.5% likely

    CWE-22

14. NGINX Ingress Controller vulnerabilityCVE-2025-14727F5 · CVSS 8.3 · 0.4% likely

    CWE-22

15. On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously generate…CVE-2018-15333F5 Networks, Inc. · 0.4% likely

    CWE-434

16. BIG-IP Configuration utility and tmsh vulnerabilityCVE-2025-59483F5 · CVSS 6.5 · 0.4% likely

    CWE-73

17. BIG-IQ iControl REST vulnerabilityCVE-2026-20916F5 · CVSS 8.1 · 0.4% likely

    CWE-22

18. On BIG-IP versions 15.0.0-15.0.1, 14.1.0.2-14.1.2.2, 14.0.0.5-14.0.1, 13.1.1.5-13.1.3.1, 12.1.4.1-12.1.5, 11.6.4-11.6.5, and 11.5.9-11.5.10, the access controls implemented by scp…CVE-2019-6679F5 · 0.3% likely

    CWE-59

19. On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1…CVE-2022-28714F5 · CVSS 7.3 · 0.3% likely

    CWE-427

20. NGINX Agent VulnerabilityCVE-2026-60062F5 · CVSS 6.4 · 0.3% likely

    CWE-22

21. iControl SOAP vulnerabilityCVE-2026-42063F5 · CVSS 4.9 · 0.3% likely

    CWE-552

22. BIG-IP iControl SOAP vulnerabilityCVE-2026-40631F5 · CVSS 8.7 · 0.2% likely

    CWE-552

23. BIG-IP Edge Client for Windows vulnerabilityCVE-2023-22358F5 · CVSS 7.8 · 0.2% likely

    CWE-427

24. BIG-IP Edge Client for Windows vulnerabilityCVE-2023-22283F5 · CVSS 6.5 · 0.2% likely

    CWE-427

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.