CVE-2025-36525

High CVSS: 8.7

When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vendor

Product

Big-ip Access Policy Manager

CWE

CWE-120

Yayın Tarihi

2025-05-07 22:15:19

Güncelleme

2025-09-29 21:30:43

Source Identifier

f5sirt@f5.com

KEV Date Added

Kategoriler

CWE-120 Big-ip Access Policy Manager HIGH F5 2025

Referanslar

https://my.f5.com/manage/s/article/K000150598

Benzer Kayıtlar

High

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker t…

High

CVE-2026-27654

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker to…

High

CVE-2026-27784

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow…

Medium

CVE-2026-28753

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of…

Medium

CVE-2026-28755

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling o…

High

CVE-2026-27651

When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause…