Loading story…
F5 published product advisories covering two third-party software flaws affecting Apache Solr and Spring Cloud Gateway, identified as CVE-2026-22022 and CVE-2026-22750. The notices indicate that customers using F5 products with these components should review vendor guidance and determine whether their deployments are exposed through bundled or integrated software.
The advisories were released through F5's product security channel and point to separate vulnerability cases rather than a single defect. Organizations running F5 environments that rely on search or API gateway functionality should inventory affected instances, assess exposure, and prioritize remediation or compensating controls based on the presence of the vulnerable components.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
F5 issued a product advisory regarding Spring Cloud Gateway vulnerability CVE-2026-22750. The reference includes no synopsis or further details about impact or remediation.
F5 issued a product advisory بشأن Apache Solr vulnerability CVE-2026-22022. No additional synopsis or technical details were provided in the reference.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
F5 published product advisories addressing two OpenSSL vulnerabilities, **`CVE-2026-22795`** and **`CVE-2025-69421`**, through notices **`K000160555`** and **`K000160554`**. The advisories indicate that F5 is tracking the impact of both flaws on its product portfolio and has released official guidance for customers through its support portal. While the advisories provided no public synopsis in the referenced material, the paired notices show coordinated disclosure and vendor response around multiple OpenSSL issues that could affect enterprise deployments relying on F5 products. Security teams using F5 platforms should review the vendor bulletins, determine product exposure, and apply any recommended mitigations or updates tied to **OpenSSL** components.
Jun 29, 2026
F5 published product advisories addressing two OpenSSL vulnerabilities, **CVE-2025-69420** and **CVE-2026-22796**, indicating potential impact to products that rely on the widely used cryptographic library. The advisories were released through F5's product security channel and identify the flaws as OpenSSL-related issues requiring customer review of affected product guidance. The notices provide separate tracking for each vulnerability, signaling that organizations using F5 platforms should determine whether deployed versions include affected OpenSSL components and apply vendor-recommended updates or mitigations. Security teams should prioritize asset inventory and patch validation for internet-facing and security-sensitive systems where OpenSSL exposure could increase operational risk.
Jun 29, 2026
F5 published product advisories covering two separate upstream security flaws affecting widely used core components: **Linux kernel** vulnerability `CVE-2025-40154` and **OpenSSL** vulnerability `CVE-2025-68160`. The notices indicate vendor tracking and assessment activity for vulnerabilities in foundational software commonly embedded in network, application delivery, and security appliances. The advisories were released through F5's product advisory channel under knowledge base articles `K000160420` and `K000160552`. While the referenced notices provide limited public synopsis text, the combined updates show F5 alerting customers to potential product impact from both an operating system kernel issue and a cryptographic library flaw, signaling the need for customers to review affected-product guidance and remediation information as it becomes available.
Jun 29, 2026