F5 Networks released patches for critical vulnerabilities in its BIG-IP and BIG-IQ products. The flaws affect Big-IP versions 11.6 or 12.x and newer, with a critical remote code execution (CVE-2021-22986) also impacting Big-IQ versions 6 and 7.x. F5 said it wasn’t aware of any public exploitation of these issues on March 10, but researchers from NCC Group said they have now found evidence of “full chain exploitation”
Source: https://thehackernews.com/2021/03/latest-f5-big-ip-bug-under-active.html