CVE-2025-61955

HighCVSS 8.8

Published: 15/10/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

15th percentile - higher than 15% of all known CVEs

Summary

A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Software versions that have reached End of Technical Support (EoTS) are not evaluated.

Risk Assessment

A local attacker with valid credentials may escalate privileges and cross security boundaries, potentially leading to unauthorized access to protected resources.

Recommendation

Update F5OS-A and F5OS-C to the latest supported versions and restrict local access to trusted users.

Other vulnerabilities in F5OS

CVE-2025-47150Medium
When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause increased SNMP memory resource utilization. Software versions that have reached End of Technical Support (EoTS) are not evaluated.

Original NVD description (English source)

A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS