F5 BIG-IP Next Central Manager SQL Injection (CVE-2024-21793; CVE-2024-26026)

Related Vulnerabilities: CVE-2024-21793   CVE-2024-26026  

Check Point Reference: CPAI-2024-0278 Date Published: 16 May 2024 Severity: High Last Updated: Thursday 16 May, 2024 Source: Industry Reference:CVE-2024-21793
CVE-2024-26026
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? F5 BIG-IP Next Central Manager up to and excluding 20.2.0 Vulnerability Description An SQL injection vulnerability exists in F5 BIG-IP Next Central Manager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.