CVE-2025-53860

MediumCVSS 4.1

Published: 15/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module (HSM) information on F5 rSeries systems.

Risk Assessment

The risk is that sensitive HSM information could be disclosed, potentially compromising cryptographic keys and other confidential data.

Recommendation

Restrict access to F5 rSeries systems and monitor activities of highly privileged users. Also check for security updates from F5.

Other vulnerabilities in F5OS-A

CVE-2023-36494Medium
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Original NVD description (English source)

A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module (HSM) information on F5 rSeries systems. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS