CVE-2025-53521
🔥 Known Exploited (CISA KEV)CRITICAL
9.3
CVSS Severity Score
Vulnerability Description
When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Platforms (CPE)
📦
F5
Big Ip Access Policy Manager
>= 15.1.0 and < 15.1.10.8>= 16.1.0 and < 16.1.6.1>= 17.1.0 and < 17.1.3>= 17.5.0 and < 17.5.1.3