Is CVE-2026-63020 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-63020?

CVE-2026-63020 has a CVSS v3 severity of LOW (3.1).

Back

CVE-2026-63020

Description

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility web browser session. This is a control plane issue; there is no data plane exposure. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.