F5 security advisories, October 2025

Every F5 security advisory published in October 2025, from F5 SIRT ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 44
Critical: 1
High: 28
In CISA KEV: 1
CVEs: 44

F5 advisories published in October 2025

Oct 15, 2025
Critical [CVE-2025-53521] When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can
Critical9.8ExploitedCISA KEV
Oct 15, 2025
High [CVE-2025-61990] When using a multi-bladed platform with more than one blade, undisclosed traffic
High7.5
Oct 15, 2025
High [CVE-2025-61935] When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests
High7.5
Oct 15, 2025
High [CVE-2025-58071] When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate
High7.5
Oct 15, 2025
High [CVE-2025-57780] vulnerability exists in F5OS-A and F5OS-C system that may
High8.8
Oct 15, 2025
High [CVE-2025-61974] When a client SSL profile is configured on a virtual server, undisclosed requests
High7.5
Oct 15, 2025
High [CVE-2025-61960] When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic
High7.5
Oct 15, 2025
High [CVE-2025-61958] BIG-IP: vulnerability exists in the iHealth command that may
High8.7
Oct 15, 2025
High [CVE-2025-61955] vulnerability exists in F5OS-A and F5OS-C systems that may
High8.8
Oct 15, 2025
High [CVE-2025-61951] Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.
High7.5
Oct 15, 2025
High [CVE-2025-61938] When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data…
High7.5
Oct 15, 2025
High [CVE-2025-60016] When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's Cipher Rule…
High7.5
Oct 15, 2025
High [CVE-2025-59781] When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries
High7.5
Oct 15, 2025
High [CVE-2025-59778] When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic
High7.5
Oct 15, 2025
High [CVE-2025-59481] vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may
High8.7
Oct 15, 2025
High [CVE-2025-59478] When a BIG-IP AFM denial-of-service (DoS) protection profile is configured on a virtual server, undisclosed requests
High7.5
Oct 15, 2025
High [CVE-2025-58120] When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.
High7.5
Oct 15, 2025
High [CVE-2025-58096] When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed…
High7.5
Oct 15, 2025
High [CVE-2025-55669] When the BIG-IP Advanced WAF and ASM security policy and a server-side HTTP/2 profile are configured on a virtual server…
High7.5
Oct 15, 2025
High [CVE-2025-55036] When BIG-IP SSL Orchestrator explicit forward proxy is configured on a virtual server and the proxy connect feature is enabled…
High7.5
Oct 15, 2025
High [CVE-2025-54858] When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a malformed JSON…
High7.5
Oct 15, 2025
High [CVE-2025-54854] When a BIG-IP APM OAuth access profile (Resource Server or Resource Client) is configured on a virtual server, undisclosed traffic
High7.5
Oct 15, 2025
High [CVE-2025-54479] When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests
High7.5
Oct 15, 2025
High [CVE-2025-53868] When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP
High8.7
Oct 15, 2025
High [CVE-2025-53856] BIG-IP: When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the…
High7.5
Oct 15, 2025
High [CVE-2025-53474] When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic
High7.5
Oct 15, 2025
High [CVE-2025-48008] When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with…
High7.5
Oct 15, 2025
High [CVE-2025-46706] When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests
High7.5
Oct 15, 2025
High [CVE-2025-41430] When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate
High7.5
Oct 15, 2025
Medium [CVE-2025-61933] reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of BIG-IP APM
Medium6.1
Oct 15, 2025
Medium [CVE-2025-53860] vulnerability exists in F5OS-A software
Medium4.1
Oct 15, 2025
Medium [CVE-2025-60015] F5OS: out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption.
Medium5.7
Oct 15, 2025
Medium [CVE-2025-60013] When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special…
Medium4.6
Oct 15, 2025
Medium [CVE-2025-59483] validation vulnerability exists in an undisclosed URL in the Configuration utility.
Medium6.5
Oct 15, 2025
Medium [CVE-2025-59269] stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility
Medium6.1
Oct 15, 2025
Medium [CVE-2025-59268] On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated…
Medium5.3
Oct 15, 2025
Medium [CVE-2025-58474] When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery (SSRF) protection or
Medium5.3
Oct 15, 2025
Medium [CVE-2025-58424] On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols
Medium5.3
Oct 15, 2025
Medium [CVE-2025-58153] Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed…
Medium5.9
Oct 15, 2025
Medium [CVE-2025-55670] On BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes systems, repeated undisclosed API calls
Medium6.5
Oct 15, 2025
Medium [CVE-2025-54805] When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process
Medium6.5
Oct 15, 2025
Medium [CVE-2025-54755] directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access files
Medium4.9
Oct 15, 2025
Medium [CVE-2025-47150] When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests
Medium6.5
Oct 15, 2025
Medium [CVE-2025-47148] When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and Identity…
Medium6.5

Get an email when F5 publishes the next one.

See F5's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about F5

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.