Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-05-03. Apply updates per vendor instructions.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-28 | 1 | Active Exploitation1 |
| 2026-03-29 | 1 | General1 |
Top 5 Trending CVEs: 1 - CVE-2020-5902 2 - CVE-2026-33634 3 - CVE-2025-31277 4 - CVE-2026-20643 5 - CVE-2025-53521 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The post merely lists five CVE identifiers with no additional context, evidence, or detailed information.
F5 BIG-IP has had hundreds of CVEs over its 25+ year run (F5 vendor total ~300 per CVE databases, vast majority tied to BIG-IP products/modules). At least 5-6 major ones actively exploited in the wild: CVE-2020-5902, CVE-2021-22986, CVE-2022-1388, CVE-2023-46747, plus batches like 40+ in 2022 and 44 in 2025. This latest CVE-2025-53521 makes another KEV entry. Keep patching!
Post summary
The post stresses that several F5 BIG‑IP CVEs, including CVE-2025-53521, are actively exploited and urges immediate patching to mitigate the risks.
14 of 14 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | f5 | big-ip_access_policy_manager | - | - | - |
| App | f5 | big-ip_advanced_firewall_manager | - | - | - |
| App | f5 | big-ip_advanced_web_application_firewall | - | - | - |
| App | f5 | big-ip_analytics | - | - | - |
| App | f5 | big-ip_application_acceleration_manager | - | - | - |
| App | f5 | big-ip_application_security_manager | - | - | - |
| App | f5 | big-ip_ddos_hybrid_defender | - | - | - |
| App | f5 | big-ip_domain_name_system | - | - | - |
| App | f5 | big-ip_fraud_protection_service | - | - | - |
| App | f5 | big-ip_global_traffic_manager | - | - | - |
| App | f5 | big-ip_link_controller | - | - | - |
| App | f5 | big-ip_local_traffic_manager | - | - | - |
| App | f5 | big-ip_policy_enforcement_manager | - | - | - |
| App | f5 | ssl_orchestrator | - | - | - |