THE UK National Cyber Security Centre (NCSC) has issued an alert regarding a critical vulnerability (CVE-2025-53521) affecting F5 BIG-IP Access Policy Manager (APM), which allows unauthenticated remote code execution. This issue has been categorized as a serious risk due to reports of active exploitation.
Organizations using BIG-IP APM are strongly advised to take immediate preventive actions, such as consulting the official security advisory, isolating affected systems, investigating for compromises, and updating to the latest software version. Further resources for organizations include guidance on incident response and vulnerability management.