CVE-2025-57780
published 2025-10-15CVE-2025-57780: A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A successful…
PriorityP350high8.8CVSS 3.1
AVLACLPRLUINSCCHIHAH
EPSS
0.19%
9.2th percentile
A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | f5os-a | — | — |
| f5 | f5os-a | — | — |
| f5 | f5os-a | >= 1.5.1 < 1.5.4 | 1.5.4 |
| f5 | f5os-c | — | — |
| f5 | f5os-c | 1.6.0 – 1.6.2 | — |
| f5 | f5os-c | >= 1.8.0 < 1.8.2 | 1.8.2 |
| f5 | f5os_appliance | >= 1.5.0 < 1.5.4 | 1.5.4 |
| f5 | f5os_appliance | >= 1.8.0 < 1.8.3 | 1.8.3 |
| f5 | f5os_chassis | >= 1.6.0 < 1.6.4 | 1.6.4 |
| f5 | f5os_chassis | >= 1.8.0 < 1.8.2 | 1.8.2 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
nvdv4.08.5HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
F5
CVE-2025-57780: A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to esca...
vendor_f5·2025-10-15·CVSS 8.8
CVE-2025-57780 [HIGH] CWE-250 CVE-2025-57780: A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to esca...
CVE-2025-57780: A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to esca...
A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Products: F5OS-A, F5OS-C
Affected Versions: 1.5.1 - 1.5.4; 1.6.0 - 1.6.2; 1.8.0; 1.8.0 - 1.8.2
F5 Advisory Articles: K000156771
F5 References: https://my.f5.com/manage/s/article/K000156771
GHSA
GHSA-jwhj-pj99-2ghx: A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges
ghsa_unreviewed·2025-10-15
CVE-2025-57780 [HIGH] CWE-250 GHSA-jwhj-pj99-2ghx: A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges
A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
No detection rules found.
No public exploits indexed.
Unit42
Threat Brief: Nation-State Actor Steals F5 Source Code and Undisclosed Vulnerabilities
blogs_unit42·2025-10-16·CVSS 8.5
CVE-2025-53868 [HIGH] Threat Brief: Nation-State Actor Steals F5 Source Code and Undisclosed Vulnerabilities
Threat Research Center
High Profile Threats
Vulnerabilities
## Threat Brief: Nation-State Actor Steals F5 Source Code and Undisclosed Vulnerabilities
Justin Moore
Published: October 16, 2025
High Profile Threats
Vulnerabilities
CVE-2025-53868
CVE-2025-57780
CVE-2025-61955
Exfiltration
## Executive Summary
On Oct. 15, 2025, F5 — a U.S. technology company — disclosed that a nation-state threat actor conducted a significant long-term compromise of their corporate networks. In this incident, attackers stole source code from their BIG-IP suite of products and information about undisclosed vulnerabilities. F5’s BIG-IP suite is commonly used by large organizations, primarily in the U.S. but also globally, for availability, access control and security. Organizations including gove
Unit42
Threat Brief: Nation-State Actor Steals F5 Source Code and Undisclosed Vulnerabilities
blogs_unit42·2025-10-16·CVSS 8.5
[HIGH] Threat Brief: Nation-State Actor Steals F5 Source Code and Undisclosed Vulnerabilities
## Executive Summary
On Oct. 15, 2025, F5 — a U.S. technology company — disclosed that a nation-state threat actor conducted a significant long-term compromise of their corporate networks. In this incident, attackers stole source code from their BIG-IP suite of products and information about undisclosed vulnerabilities. F5’s BIG-IP suite is commonly used by large organizations, primarily in the U.S. but also globally, for availability, access control and security. Organizations including government agencies and Fortune 500 companies rely on BIG-IP.
Cortex Xpanse currently identifies over 600,000 unique hosts behind a Big-IP instance exposed to the internet.
F5’s investigation revealed that the attackers maintained long-term access to the company’s product development environment and eng
Tenable
FAQ on F5 Security Incident
blogs_tenable·2025-10-15
FAQ on F5 Security Incident
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Unit42
Threat Brief: Twelve Tips for the Holidays
blogs_unit42·2018-12-13
Threat Brief: Twelve Tips for the Holidays
## Threat Brief: Twelve Tips for the Holidays
Unit 42
Published: December 13, 2018
High Profile Threats
Learning Hub
Devices
Holidays
Home security
IoT
Privacy
This time every year, people all over the world get new devices. Regardless of what holiday(s) you may (or may not) celebrate, the end of the year is a time for people to give and receive some of the latest devices to come on to the market.
Nothing spoils a new gadget more than having some kind of security or privacy problem related to it. After that, nothing spoils the fun and excitement of unboxing and playing with an exciting new device than trying to figure out what you need to do to use it with reasonable safety and privacy.
To that end, we’re providing some very basic, but critical steps that you, your family, you
Unit42
Threat Brief: Embrace Mobile Banking with Caution
blogs_unit42·2018-10-23
Threat Brief: Embrace Mobile Banking with Caution
## Threat Brief: Embrace Mobile Banking with Caution
Unit 42
Published: October 23, 2018
High Profile Threats
Learning Hub
Banking
Banking trojans
Mobile
Online banking
The Brazilian Central Bank recently announced that 2017 was the first year in which people did more banking using mobile devices than on PCs. There were 24.5 billion mobile banking transactions while there were 20.6 billion PC-based transactions.
Not all countries are embracing mobile banking as quickly as Brazil. But, mobile banking use is picking up around the globe.
What is it?
As more people move to mobile banking, we believe attackers will focus their attacks away from PC banking and towards mobile banking. This means the risks of losing control of your accounts through mobile online banking are likely to
2025-10-15
Published