Last Modified: May 05, 2026
Affected Product(s):
BIG-IP TMOS
Fixed In:
17.5.1.6, 17.1.3.2
Opened: Mar 28, 2026 Severity: 2-Critical
Some data-body commands (add, set, replace, incr, decr) failed to close connections properly on error, causing request data to be misinterpreted as commands.
Connection remains open even in the event of command failures, which can result in data being accepted as a command.
There is a parsing failure in commands that require data in the request body.
N/A
None