Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

CISA Adds CVE-2025-53521 to KEV After Active F5 BIG

The Hacker Newsby @TheHackersNews ()3 min read1 · 1 read
Analyze CVE-2025-53521 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-53521
Stack-Based Buffer Overflow in F5 BIG-IP APM Enables Unauthenticated RCE
9.32%KEV
KEV

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Mar 28, 2026 Vulnerability / Network Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw impacting F5 BIG-IP Access Policy Manager (APM) to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.