A vulnerability was found in F5 BIG-IP, BIG-IP Next SPK, BIG-IP Next CNF and BIG-IP Next for Kubernetes . It has been rated as critical . This impacts an unknown function of the component Traffic Management Microkernel . This manipulation causes incorrect calculation of buffer size. The identification of this vulnerability is CVE-2026-40618 . It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.