Do Son An exploited BIG-IP APM vulnerability tracked as CVE-2026-94127 allows RCE attacks. Secure your BIG-IP APM vulnerability deployments with new F5 hotfixes.
BIG-IP
CISA adds F5 BIG-IP RCE (CVE-2025-53521) to its KEV Catalog. With a 9.8 CVSS score and active exploits, federal agencies must patch by March 30, 2026.
F5 disclosed a breach by a "highly sophisticated nation-state" that stole BIG-IP source code and internal vuln info. CISA issued an Emergency Directive mandating immediate patching of 44 flaws.
Stay informed about CVE-2024-45844, a vulnerability in F5 BIG-IP that allows authenticated attackers to gain unauthorized access and control the system.