CVE-2026-32643 is a vulnerability in F5 BIG-IP and BIG-IQ products that permits a highly privileged, authenticated user with the Certificate Manager role to alter configuration objects to execute arbitrary commands. The vulnerability stems from execution with unnecessary privileges (CWE-250). It affects several versions of BIG-IP (16.1.0, 17.1.0, 17.5.0, and 21.0.0). The CVSS v3.1 base score is 8.7, reflecting high impact on confidentiality and integrity, with network attack vector, low attack complexity, and no user interaction required. The vulnerability is published but currently lacks an official remediation or patch from the vendor. No exploits are known in the wild at this time.

An attacker with the Certificate Manager role, which is a highly privileged authenticated role, can modify configuration objects to run arbitrary commands on the affected F5 BIG-IP or BIG-IQ systems. This can lead to a complete compromise of confidentiality and integrity of the system. Availability impact is not indicated. The vulnerability allows privilege escalation and remote code execution capabilities within the scope of the authenticated role.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Certificate Manager role to trusted administrators only and monitor for any unauthorized configuration changes. Follow F5's official advisories for updates on patches or mitigations.