F5 Security Incident Advisory

The report summarizes F5’s October 2025 Quarterly Security Notification and related incident context: multiple high-severity CVEs (e.g., CVE-2025-53868, CVE-2025-61955, CVE-2025-57780, CVE-2025-60016, CVE-2025-48008, CVE-2025-61974) affecting BIG-IP and F5OS, the versions patched, and mitigations; F5 states there is no evidence a product vulnerability was used for initial access, but CISA warns that stolen code and vulnerability details present an imminent weaponization risk even though active exploitation was not observed at disclosure.