CVE-2025-61955: Improper Neutralization of Directives in Dynamically Evaluated Code

A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support EoTS are not...

PT-2025-42350

Name of the Vulnerable Software and Affected Versions F5OS-A and F5OS-C affected versions not specified Description An out-of-bounds write issue exists that may cause memory corruption. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2025-59778: Allocation of Resources Without Limits or Throttling

When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause multiple containers to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-60015: Out-of-bounds Write

An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

F5 F5OS-A和F5 F5OS-C 缓冲区错误漏洞

F5 F5OS-A and F5 F5OS-C are both products of F5 Corporation, U.S.A. F5 F5OS-A is an operating system software.F5 F5OS-C is an operating system software on VELOS hardware. A buffer error vulnerability exists in F5 F5OS-A and F5 F5OS-C, which stems from the presence of out-of-bounds writes that cou...

PT-2025-42347

Name of the Vulnerable Software and Affected Versions F5 VELOS F5OS-C versions affected versions not specified Description A resource allocation flaw exists in the F5 VELOS F5OS-C partition control plane. When the Allowed IP Addresses feature is configured, undisclosed traffic can cause container...

PT-2025-42354

Name of the Vulnerable Software and Affected Versions F5OS-A and F5OS-C affected versions not specified Description A flaw exists in F5OS-A and F5OS-C systems that could allow an authenticated attacker with local access to elevate their privileges. A successful exploit may allow the attacker to...

CVE-2025-57780: Execution with Unnecessary Privileges

A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support EoTS are not...

PT-2025-42368

Name of the Vulnerable Software and Affected Versions F5OS-A and F5OS-C affected versions not specified Description A flaw exists that could allow an authenticated attacker with local access to increase their system privileges. Exploitation may enable an attacker to bypass security restrictions...

EUVD-2025-13943

Malicious code in bioql PyPI...

CVE-2025-43878

When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. Note: Software versions which have reached End of...

CVE-2025-43878

When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. Note: Software versions which have reached End of...

CVE-2025-43878

When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. Note: Software versions which have reached End of...

CVE-2025-43878

In F5OS-A/C, the CVE-2025-43878 issue affects Appliance mode: an authenticated user with Administrator/Resource Administrator rights can bypass Appliance mode restrictions using the system diagnostics tcpdump command. Vulnerable mappings show F5OS-A versions 1.5.1–1.5.3 and F5OS-C versions 1.6.0–...

PT-2025-20310 · F5 · F5Os-C/A

Name of the Vulnerable Software and Affected Versions: F5OS-C/A affected versions not specified Description: The issue allows an authenticated attacker with the Administrator or Resource Administrator role to bypass Appliance mode restrictions on a F5OS-C/A system when running in Appliance mode...

CVE-2025-43878: Improper Neutralization of Quoting Syntax

When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. Note: Software versions which have reached End of...

Command injection

On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for command injection. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-22657

CVE-2023-22657 affects F5OS-A (versions 1.2.0 up to, but not including, 1.3.0) and F5OS-C (versions 1.3.0 up to, but not including, 1.5.0). The vulnerability arises when processing F5OS tenant file names, enabling command injection. The F5 security advisory K06345931 confirms fixes: F5OS-A fixed ...

CVE-2023-22657: Improper Neutralization of Special Elements used in a Command

On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for command injection. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2023-18607 · F5 · F5Os-A +1

Name of the Vulnerable Software and Affected Versions: F5OS-A versions 1.2.0 through 1.2.x F5OS-C versions 1.3.0 through 1.4.x Description: The issue allows for command injection when processing F5OS tenant file names. This may potentially lead to unauthorized access or control. No information is...