F5 has reclassified a BIG-IP APM denial-of-service (DoS) vulnerability as a critical-severity remote code execution (RCE) flaw, warning that attackers are exploiting it to deploy webshells on ...

Reclassified as a remote code execution flaw, the F5 BIG-IP APM vulnerability has been upgraded to CVSS 9.8, requiring ...

Internet security watchdog Shadowserver has found over 14,000 BIG-IP APM instances exposed online amid ongoing attacks ...

The new information shows that remote code execution can take place when BIG-IP APM access policy is configured on a virtual ...

Threat actors are exploiting CVE-2025-53521, a critical F5 BIG-IP vulnerability that has been reclassified as a remote code execution issue.

CISA adds actively exploited F5 BIG-IP APM CVE-2025-53521 (CVSS 9.3) to KEV, ordering FCEB patch by March 30, 2026 to curb RCE risk.

IT managers who use F5 BIG-IP Access Policy Manager (APM) (now operating under the name “BIG-IP Zero Trust Access”) for app ...

Spread the loveThe cybersecurity landscape is under constant threat, with various vulnerabilities being exploited by malicious actors. Recently, the US Cybersecurity and Infrastructure Security Agency ...

UK organizations have been encouraged to immediately patch a critical new vulnerability in F5’s BIG-IP Access Policy Manager ...

Spread the loveThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added a new entry to its Known Exploited Vulnerabilities (KEV) catalog, highlighting a critical ...

Flaws in major application delivery and security platforms and VPN gateways are being actively exploited or targeted. Under ...

Hackers are finally targeting CVE-2025-53521, an F5 BIG-IP vulnerability that can lead to remote code execution.