CVE-2018-5526

Under certain conditions, on F5 BIG-IP ASM 13.1.0-13.1.0.5, Behavioral DOS (BADOS) protection may fail during an attack.

• http://www.securityfocus.com/bid/104470Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041019Third Party Advisory, VDB Entry
• https://support.f5.com/csp/article/K62201098Vendor Advisory
• http://www.securityfocus.com/bid/104470Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041019Third Party Advisory, VDB Entry
• https://support.f5.com/csp/article/K62201098Vendor Advisory

Published

Jun 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5520On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-…
• CVE-2018-5521On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5…
• CVE-2018-5522On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-…
• CVE-2018-5523On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.…
• CVE-2018-5524Under certain conditions, on F5 BIG-IP 13.0.0-13.1.0.5, 12.1…
• CVE-2018-5525A local file vulnerability exists in the F5 BIG-IP Configura…
• CVE-2018-5527On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclos…
• CVE-2018-5528Under certain conditions, TMM may restart and produce a core…
• CVE-2018-5529The svpn component of the F5 BIG-IP APM client prior to vers…
• CVE-2018-5530F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3…
• CVE-2018-5531Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 1…
• CVE-2018-5532On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2…