CVE-2014-9326: The automatic signature update functionality in the (1) Phone Home feature in F5 BIG-IP LTM, AAM, AFM, Anal...

Security readout for executives and security teams

This issue affects certain F5 BIG-IP products whose automatic signature update, Phone Home, or Call Home functions may accept forged SSL certificates. An attacker positioned to intercept that traffic could impersonate the update server and tamper with trust in the connection. Exposure is most likely where affected F5 BIG-IP versions use Phone Home, Call Home, or automatic signature update features over networks where traffic interception is plausible. Treat this as a focused appliance hygiene issue, not an internet-wide emergency. Prioritize environments where affected F5 devices still run legacy 10.x or 11.x software and rely on automatic security-signature updates. Mitigation focus: Inventory BIG-IP modules and versions against the CVE description.; Review F5 SOL16090 for vendor-confirmed fixes or workarounds.; Disable affected automatic update or call-home features if vendor guidance recommends it..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.