{"uuid": "c995092e-6c91-4624-90a8-a079e118552a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1283", "content": "Critical Vulnerability Exposes Thousands of F5 Access Management Systems to Attacks\n\nRecent reports indicate that over 14,000 F5 BIG-IP APM instances are currently exposed online, with attackers actively exploiting a critical Remote Code Execution (RCE) vulnerability identified as CVE-2025-53521. This vulnerability has been assigned a CVSS score of 9.8, highlighting its severity and the urgent need for remediation.The flaw allows specially crafted malicious traffic to trigger RCE when an access policy is enabled on a virtual server. According to the advisory, \u201cWhen a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).\u201d\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:03.879806Z"}