PT-2025-42327 · F5 · F5 Big-Ip

Published 2025-10-15 · Updated 2026-02-04 · CVE-2025-53868

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions (affected versions not specified)

Description A privileged, authenticated attacker with access to SCP and SFTP may bypass Appliance mode restrictions using undisclosed commands when the software is running in Appliance mode. This bypass can expose sensitive features.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-53868

Affected Products

F5 Big-Ip

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-53868 · Security Note
• https://my.f5.com/manage/s/article/K000151902 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-53868 · Vendor Advisory
• https://t.me/cveNotify/139731 · Telegram Post
• https://t.me/cveNotify/150885 · Telegram Post
• https://twitter.com/CVEnew/status/1978545072338882987 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1978485705253797975 · Twitter Post
• https://reddit.com/r/f5networks/comments/1okn55c/factchecking_the_deep_specter_report_on_f5 · Reddit Post