Platforms Enterprise It SecurityControl

F5 BIG IP APM remote code execution under active exploitation

March 30, 2026BleepingComputer, Qualys, Eduard Kovacs

BleepingComputer, Qualys, and others warn that a critical F5 BIG-IP Access Policy Manager flaw has been reclassified as remote code execution and is being actively exploited, pushing urgent patching and exposure reduction.

Hackers now exploit critical F5 BIG-IP flaw in attacks, patch now
CISA has added a critical vulnerability in F5 BIG-IP Access Policy Manager to its Known Exploited Vulnerabilities catalog.
Tracked as CVE-2025-53521, this flaw allows for remote code execution and is currently seeing active exploitation.
Over 14,000 BIG-IP APM instances are exposed to ongoing attacks exploiting a critical-severity remote code execution (RCE) vulnerability
BleepingComputer
Qualys
Eduard Kovacs
rce vulnerabilitypatchingedge appliancecode executionremote coderce vulnerability

See what experts are saying right now

This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.

← Back to Cyber Security