CERT-In Flags Critical F5 Security Flaws

CERT-In advisory CIVN-2025-0035 details multiple vulnerabilities affecting a broad range of F5 products (BIG-IP Next, BIG-IP 15/16/17, BIG-IQ, F5 Distributed Cloud, F5 Silverline, NGINX, Traffix, and hardware models), including CVEs in zlib, Apache Tomcat, MiniZip, and tcpdump that can enable denial-of-service, session hijacking, buffer overflows, and potential arbitrary code execution; F5 recommends mitigations such as disabling HTTP compression, restricting configuration access, upgrading affected components, and applying security patches.