F5 BIG-IP EUVD-2026-29977

Apply vendor-supplied patches detailed in F5 Security Advisory K000158978 at https://my.f5.com/manage/s/article/K000158978, which specifies exact patched versions for each affected BIG-IP product line. Patching should be prioritized for internet-facing BIG-IP instances and those handling SSL termination for critical applications. If immediate patching is not feasible during change control windows, implement rate-limiting at upstream network devices targeting the affected virtual server IP addresses to constrain potential resource exhaustion, though effectiveness depends on the undisclosed attack pattern. Connection limits and TCP SYN flood protections may provide partial mitigation but are not substitutes for patching since the specific trigger mechanism is not publicly detailed. For organizations with multiple BIG-IP devices, prioritize patching edge devices with SSL profiles before internal instances. Disabling SSL profiles is not a viable workaround as it eliminates core ADC functionality. Monitor virtual server connection statistics and availability metrics during the patching window to detect exploitation attempts. F5 support should be contacted for guidance on deployment-specific compensating controls if patching must be delayed beyond standard maintenance cycles.