Last Modified: Feb 03, 2026
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
21.0.0
Fixed In:
21.0.0.1
Opened: Nov 06, 2025 Severity: 2-Critical
When the SSE plugin is enabled, the WAF plugin receives a partial response body.
WAF plugin sees only part of the ingress stream.
SSE Profile (Server Sent Events) and WAF plugin enabled on a Virtual Server.
Disable SSE profile on virtual server when WAF plugin is configured.
The HUDFILTER order on server side was adjusted to ensure both WAF plugin and SSE HUDFILTER receive the complete response body.