F5 Issues Security Patches for Multiple Products After Recent Breach

F5 Networks has issued security patches for multiple products following a recent breach, with the company stating in its quarterly security notification on 15 October 2025 that numerous high‑severity vulnerabilities could expose enterprise networks. The extensive vulnerability disclosure identifies over 30 flaws across F5’s product portfolio, most of which are classified as high‑severity threats and affect core products such as BIG-IP systems, F5OS platforms, and the newer BIG-IP Next series.

The advisory details various attack vectors, including SSL/TLS protocol weaknesses, network protocol exploitation, and system‑level security flaws, with many CVSS scores indicating significant potential impact if unpatched.

Among the listed CVEs, CVE-2025-53868, CVE-2025-61955, CVE-2025-57780, CVE-2025-60016, CVE-2025-48008, CVE-2025-59781, CVE-2025-41430, CVE-2025-55669, CVE-2025-61951, CVE-2025-55036 and others are described as high severity, affecting modules including ASM, SSL Orchestrator and APM across BIG-IP versions. Two CVEs, CVE-2025-61955 and CVE-2025-57780, impact both F5OS‑A and F5OS‑C variants, with CVSS scores reaching 8.8 in appliance mode configurations.

F5 urges immediate patch deployment, and updated software versions addressing each identified vulnerability have been released for supported product versions.