CVE-2022-41806: F5 BIG-IP Advanced Firewall Manager

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In versions 16.1.x before 16.1.3.2 and 15.1.x before 15.1.5.1, when BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.

Affected products

• F5 BIG-IP Advanced Firewall Manager: from 15.1.0, before 15.1.5.1 (fixed in 15.1.5.1); from 16.1.0, before 16.1.3.2 (fixed in 16.1.3.2)

Published 2022-10-19. Last modified 2026-06-17.