CVE-2026-41954 — iControl REST and tmsh vulnerability
Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with reso…
Published: 2026-05-13 · CVSS: 6.9 · CVSS 4.0
Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7