Gray Hats notes CISA adding F5 BIG-IP RCE to KEV with active exploitation and a federal patch-by date, echoed by The Cyber Security Hub’s exploitation warning.
We added F5 BIG-IP remote code execution vulnerability CVE-2025-53521 to our Known Exploited Vulnerabilities Catalog.
CISA flagged active exploitation of an F5 BIG-IP APM flaw.CVE-2025-53521 (CVSS 9.3) enables RCE
Exploitation is confirmed in the wild, with a federal patch deadline set.
Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)
CISA adds F5 BIG-IP RCE (CVE-2025-53521) to its KEV Catalog.
With a 9.8 CVSS score and active exploits, federal agencies must patch by March 30, 2026.
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security