CVE-2025-53521
KEV Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 2.30%
- 83th pct
- KEV
- Listed
- 2026-03-27
- Class
- other
- CWE-121
Description
When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
References
Status: profiled · ingested 2026-10-08T12:00:43.000Z