CVE-2024-32049: F5 BIG-IP Next Central Manager

High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days.

BIG-IP Next Central Manager (CM) may allow an unauthenticated, remote attacker to obtain the BIG-IP Next LTM/WAF instance credentials.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

• F5 BIG-IP Next Central Manager: from 20.0.1, before 20.1.0 (fixed in 20.1.0)

Published 2024-05-08. Last modified 2026-06-17.