BIG-IP

CVE-2026-20730: BIG-IP Edge Client for Windows vulnerability

A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information.

Published

ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityLOWCVSS 4.0 2
EPSS0.12%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable

Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.

Affected and fixed versions

Product / branchFixed in
BIG-IP Edge Client (Windows) 7.27.2.6.2 or later

Always confirm against the vendor advisory, which lists every fixed hotfix.

What it is

A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Sources

KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.

Get alerts

A notification when we publish a new analysis or a covered vendor gets a new actively exploited CVE. No account, no email.