High Threat Security Alert (A26-01-18): Multiple Vulnerabilities in F5 Products

Description:

F5 has published security advisories to address multiple vulnerabilities in F5 Products. The details about the vulnerabilities can be found at the following websites:
https://my.f5.com/manage/s/article/K000159607
https://my.f5.com/manage/s/article/K000159667

Reports indicated that proof-of-concept (PoC) exploit code for a denial of service vulnerability (CVE-2025-11083) is publicly available. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• BIG-IQ Centralized Management versions 8.3.0 - 8.4.0
• F5OS-A versions 1.5.1 - 1.5.4
• F5OS-A versions 1.8.0 - 1.8.3
• F5OS-C versions 1.6.0 - 1.6.4
• F5OS-C versions 1.8.0 - 1.8.2

Impact:

Successful exploitation of the vulnerabilities could lead to denial of service or security restriction bypass on an affected system.

Recommendation:

Software updates for affected systems are now available. System administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk. It is recommended to consult the product vendors for the fixes and assistance.

More Information:

• https://my.f5.com/manage/s/article/K000159607
• https://my.f5.com/manage/s/article/K000159667
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11082 (to CVE-2025-11083)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12816