CVE-2026-20730

LOW

BIG-IP Edge Client - Info Disclosure

Title source: llm

Description

A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

References (1)

[Vendor Advisory] https://my.f5.com/manage/s/article/K000158931

Scores

CVSS v3 3.3

EPSS 0.0003

EPSS Percentile 7.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-200

Status published

Products (4)

f5/big-ip_access_policy_manager 17.5.0

f5/big-ip_access_policy_manager 17.5.1

f5/big-ip_access_policy_manager 16.1.0 - 16.1.6

f5/big-ip_access_policy_manager_client 7.2.5 - 7.2.6.2

Published Feb 04, 2026

Tracked Since Feb 18, 2026