CVE-2025-59268: F5 BIG-IP · CWE-201
Affects F5 BIG-IPSource CVE Database V5
Not known to be exploited · CVSS 5.3 Medium.
Data as of 25 Oct 2026, 19:02 UTC
- EPSS
- 0.4% chance of exploitation in 30 days – higher than 34% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 15 Oct 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| F5 BIG-IP | Affected
| Fixed in– |
AI-suggested
To mitigate CVE-2025-59268, organizations should implement the following specific measures: 1) Restrict access to the BIG-IP Configuration utility by limiting network exposure only to trusted administrative networks or VPNs, using network segmentation and firewall rules to block unauthorized external access. 2) Employ strong access controls and multi-factor authentication for all administrative interfaces to reduce the risk of unauthorized access. 3) Monitor network traffic and logs for unusual or unauthorized access attempts to the Configuration utility endpoints. 4) Stay informed about official F5 patches or updates addressing this vulnerability and apply them promptly once available. 5) Conduct regular security assessments and penetration testing focused on management interfaces to identify and remediate similar information exposure issues. 6) Consider deploying web application firewalls (WAFs) or intrusion detection/prevention systems (IDS/IPS) to detect and block suspicious requests targeting the Configuration utility. 7) Educate network and security teams about this vulnerability to ensure rapid response and containment if exploitation attempts are detected. These targeted actions go beyond generic advice by focusing on reducing exposure of the Configuration utility and enhancing detection capabilities.
Description
On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.