F5 Issues Security Patches for Multiple Products After Recent Breach

F5 Networks has released comprehensive security patches addressing multiple critical vulnerabilities across its product portfolio following a recent security incident.

The company issued its quarterly security notification on Mon, Oct 15, 2025, documenting numerous high-severity vulnerabilities that could potentially expose enterprise networks to significant security risks.

The security advisory identifies over 30 vulnerabilities spanning F5's entire product ecosystem, with the majority classified as high-severity threats. These vulnerabilities affect core products including BIG-IP systems, F5OS platforms, and the newer BIG-IP Next series. The disclosed vulnerabilities encompass various attack vectors including SSL/TLS protocol weaknesses, network protocol exploitation, and system-level security flaws. The high CVSS scores associated with many disclosed vulnerabilities suggest potential for significant security impact if left unpatched.

CVE CVSS Score Severity Description

CVE-2025-53868 8.7 (v3.1) / 8.5 (v4.0) High SCP and SFTP vulnerability

CVE-2025-61955 7.8-8.8 (v3.1) / 8.5 (v4.0) High F5OS vulnerability

CVE-2025-57780 7.8-8.8 (v3.1) / 8.5 (v4.0) High F5OS vulnerability

CVE-2025-60016 7.5 (v3.1) / 8.7 (v4.0) High SSL/TLS vulnerability

CVE-2025-48008 7.5 (v3.1) / 8.7 (v4.0) High MPTCP vulnerability

CVE-2025-59781 7.5 (v3.1) / 8.7 (v4.0) High DNS cache vulnerability

CVE-2025-41430 7.5 (v3.1) / 8.7 (v4.0) High SSL Orchestrator vulnerability

CVE-2025-55669 7.5 (v3.1) / 8.7 (v4.0) High HTTP/2 vulnerability

CVE-2025-61951 7.5 (v3.1) / 8.7 (v4.0) High DTLS 1.2 vulnerability

CVE-2025-55036 7.5 (v3.1) / 8.7 (v4.0) High SSL Orchestrator vulnerability

The timing of this comprehensive patch release suggests F5 conducted an extensive internal security audit following recent security concerns. BIG-IP systems, widely deployed in enterprise environments for application delivery and security services, represent the primary focus of the security updates. Multiple CVEs target different BIG-IP modules, including Application Security Manager (ASM), Advanced Web Application Firewall , SSL Orchestrator, and Access Policy Manager (APM). These components serve critical roles in protecting enterprise applications and managing secure access.

F5OS platforms, which provide the underlying operating system for next-generation F5 hardware, also face significant vulnerabilities. Two separate CVEs (CVE-2025-61955 and CVE-2025-57780) affect both F5OS-A and F5OS-C variants, with CVSS scores reaching 8.8 in appliance mode configurations. The security flaws span various technical domains including cryptographic implementations, network protocol handling, and system process management, indicating comprehensive security weaknesses across F5's technology stack.

F5 strongly recommends immediate patch deployment across all affected systems. The company has released updated software versions addressing each identified vulnerability, with fixes available for supported product versions. Organizations using F5 products should prioritize patch deployment based on their specific product configurations and deployment scenarios. The vulnerability disclosure includes detailed version information for affected products and corresponding patch releases. Most critical vulnerabilities affect multiple product versions spanning several years of releases, indicating widespread exposure across F5's installed base. Security teams should conduct immediate assessments of their F5 deployments and develop prioritized patching schedules.

Based on reporting by GBHackers.