CVE-2025-36504 | F5 BIG-IP Next/BIG-IP Next SPK/BIG-IP Next CNF/BIG-IP HTTP/2 allocation of resources (K000140919)

A vulnerability, which was classified as critical, was found in F5 BIG-IP Next, BIG-IP Next SPK, BIG-IP Next CNF and BIG-IP. Affected is an unknown function of the component HTTP2 Handler. The manipulation leads to allocation of resources.

This vulnerability is traded as CVE-2025-36504. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.