# CVE-2026-34019

## Summary

- **CVE ID:** CVE-2026-34019
- **Severity:** MEDIUM
- **CVSS Score:** 6.3 (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
- **CWE:** CWE-410
- **Published:** May 13, 2026
- **Last Modified:** May 13, 2026

## Description

When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD packets and cause the configured routing protocol to fail over.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

## Affected Products

- F5 — BIG-IP (21.0.0)
- F5 — BIG-IP (17.5.0)
- F5 — BIG-IP (17.1.0)
- F5 — BIG-IP (16.1.0)

## References

- [CNA](https://my.f5.com/manage/s/article/K000150508)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.29%
- **EPSS Percentile:** 21.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._