F5
F5 BIG-IP APM Hotfixes Address Critical OAuth Vulnerability
09/22/2026
BIG-IP APM OAuth Authorization Server configurations face an exploited unauthenticated code-execution flaw. Preserve evidence, obtain F5's supported mitigation and hotfix, and keep forensic triage separate from successful patch installation.
CVE-2025-53521: F5 BIG-IP APM unauthenticated remote code execution
09/17/2026
A stack-based buffer overflow in BIG-IP APM can permit remote code execution. Match the APM configuration and release branch, install the supported fix, and follow F5's additional mitigation and compromise-review guidance.