Quick one for anyone running F5 gear. F5 published an advisory (K000163710, CVE-2026-10723) for a vulnerability in BIG-IP DNS that could allow spoofing.
Affected versions per Hong Kong’s GovCERT alert: BIG-IP DNS 17.1.0 to 17.1.3, 17.5.0 to 17.5.1, and 21.1.0. Updates and mitigations are out now.
DNS spoofing on your authoritative or GSLB layer can send users somewhere you really don’t want them going, so put this on the list for your next maintenance window and check F5’s article for the fixed versions.
Happy Hacking!
