Vulnerability intelligence
CVE-2022-1388
F5 BIG-IP Missing Authentication Vulnerability
F5 BIG-IP
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data
Exploitation
Confirmed in the wild
Used in ransomware campaigns
Remediation
Patch available
Federal deadline 2022-05-31
CISA required action
Apply updates per vendor instructions. Deadline for federal agencies: 2022-05-31.
1 article across 1 outlet · first covered Sep 15, 2026 · latest Sep 15, 2026
Coverage timeline
-
Attackers Exploited Fortinet and F5 Flaws to Target Thai ISP 3BBwww.securityweek.com · Sep 15, 2026