CVE-2026-20730

published 2026-02-04

CVE-2026-20730: A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information. Note…

low 2 CVSS 4.0

AV L AC L AT P PR L UI N VC L VI N VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected

8 ranges

Vendor	Product	Version range	Fixed in
f5	big-ip_access_policy_manager	—	—
f5	big-ip_access_policy_manager	—	—
f5	big-ip_access_policy_manager	16.1.0 – 16.1.6	—
f5	big-ip_access_policy_manager	>= 17.1.0 < 17.1.3.1	17.1.3.1
f5	big-ip_access_policy_manager_client	—	—
f5	big-ip_access_policy_manager_client	>= 7.2.5 < 7.2.6.2	7.2.6.2
f5	big-ip_apm	—	—
f5	big-ip_edge_client	>= 7.2.5 < 7.2.6.2	7.2.6.2

CWE-200