Last Modified: Apr 20, 2026
Affected Product(s):
BIG-IP APM
Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1
Opened: Jan 20, 2026 Severity: 3-Major
UI allows default epsec package to be uploaded
Creates a duplicate configuration entry with path /Common/EPSEC/Upload/epsec-<version>.iso Cannot delete the duplicate entry via GUI or CLI as it's marked as a system default package
Upload the default epsec package through UI
Manually edit bigip.conf to remove EPSEC package configuration entry, then touch /service/mcpd/forceload and reboot
None