https://vulnerability.circl.lu/sightings/feed 2026-08-03T22:53:55.522324+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/490c1402-0c9e-4a73-b1db-22d94534b35e/export 2026-08-03T22:53:55.548575+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "490c1402-0c9e-4a73-b1db-22d94534b35e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1283", "content": "Critical Vulnerability Exposes Thousands of F5 Access Management Systems to Attacks\n\nRecent reports indicate that over 14,000 F5 BIG-IP APM instances are currently exposed online, with attackers actively exploiting a critical Remote Code Execution (RCE) vulnerability identified as CVE-2025-53521. This vulnerability has been assigned a CVSS score of 9.8, highlighting its severity and the urgent need for remediation.The flaw allows specially crafted malicious traffic to trigger RCE when an access policy is enabled on a virtual server. According to the advisory, \u201cWhen a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).\u201d\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:26.072106Z"} 2026-07-23T00:00:26.072106+00:00 https://vulnerability.circl.lu/sighting/c995092e-6c91-4624-90a8-a079e118552a/export 2026-08-03T22:53:55.550702+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c995092e-6c91-4624-90a8-a079e118552a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1283", "content": "Critical Vulnerability Exposes Thousands of F5 Access Management Systems to Attacks\n\nRecent reports indicate that over 14,000 F5 BIG-IP APM instances are currently exposed online, with attackers actively exploiting a critical Remote Code Execution (RCE) vulnerability identified as CVE-2025-53521. This vulnerability has been assigned a CVSS score of 9.8, highlighting its severity and the urgent need for remediation.The flaw allows specially crafted malicious traffic to trigger RCE when an access policy is enabled on a virtual server. According to the advisory, \u201cWhen a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).\u201d\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:03.879806Z"} 2026-07-22T05:00:03.879806+00:00 https://vulnerability.circl.lu/sighting/a11c6ea8-3294-4a05-abe7-9a542aa76591/export 2026-08-03T22:53:55.550832+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a11c6ea8-3294-4a05-abe7-9a542aa76591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/20378", "content": "CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation \u2013 thehackernews.com\n\nSat, 28 Mar 2026 15:07:00", "creation_timestamp": "2026-07-20T00:00:21.449037Z"} 2026-07-20T00:00:21.449037+00:00 https://vulnerability.circl.lu/sighting/0ddb8217-4374-4a67-8cc7-ba5948df0df6/export 2026-08-03T22:53:55.550936+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0ddb8217-4374-4a67-8cc7-ba5948df0df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20378", "content": "CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation \u2013 thehackernews.com\n\nSat, 28 Mar 2026 15:07:00", "creation_timestamp": "2026-07-19T16:00:05.881063Z"} 2026-07-19T16:00:05.881063+00:00 https://vulnerability.circl.lu/sighting/aab16bd1-f707-4524-bdc4-3d3b0ac5e257/export 2026-08-03T22:53:55.551037+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "aab16bd1-f707-4524-bdc4-3d3b0ac5e257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "exploited", "source": "https://t.me/VulnerabilityNews/41597", "content": "CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw impacting F5 BIG-IP Access Policy Manager (APM) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe vulnerability in question is CVE-2025-53521 (CVSS v4 score: 9.3), which could allow a threat actor to achieve remote code execution.\n\"When a\nhttps://thehackernews.com/2026/03/cisa-adds-cve-2025-53521-to-kev-after.html", "creation_timestamp": "2026-07-19T00:00:27.143206Z"} 2026-07-19T00:00:27.143206+00:00 https://vulnerability.circl.lu/sighting/1b6c88f0-ff09-42c7-861a-3a0cc4c3022c/export 2026-08-03T22:53:55.551137+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1b6c88f0-ff09-42c7-861a-3a0cc4c3022c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "exploited", "source": "https://t.me/VulnerabilityNews/41588", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2025-53521 F5 BIG-IP Remote Code Execution Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/03/27/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-07-19T00:00:12.942788Z"} 2026-07-19T00:00:12.942788+00:00 https://vulnerability.circl.lu/sighting/e069c4e1-0ec1-4359-957f-d5982efa62f1/export 2026-08-03T22:53:55.551240+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e069c4e1-0ec1-4359-957f-d5982efa62f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "seen", "source": "https://t.me/VulnerabilityNews/41588", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2025-53521 F5 BIG-IP Remote Code Execution Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/03/27/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-07-18T13:00:05.393671Z"} 2026-07-18T13:00:05.393671+00:00 https://vulnerability.circl.lu/sighting/0f4f536d-bfa8-49b8-abb6-59b5286c64fa/export 2026-08-03T22:53:55.551342+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0f4f536d-bfa8-49b8-abb6-59b5286c64fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "seen", "source": "https://t.me/VulnerabilityNews/41597", "content": "CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw impacting F5 BIG-IP Access Policy Manager (APM) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe vulnerability in question is CVE-2025-53521 (CVSS v4 score: 9.3), which could allow a threat actor to achieve remote code execution.\n\"When a\nhttps://thehackernews.com/2026/03/cisa-adds-cve-2025-53521-to-kev-after.html", "creation_timestamp": "2026-07-18T13:00:04.902513Z"} 2026-07-18T13:00:04.902513+00:00 https://vulnerability.circl.lu/sighting/f717f972-1045-4c25-9540-dfb51be63e5e/export 2026-08-03T22:53:55.551439+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f717f972-1045-4c25-9540-dfb51be63e5e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1c2c6563-dcae-4dc2-8cc9-e0b4fa1effea", "content": "", "creation_timestamp": "2026-06-23T14:03:40.741273Z"} 2026-06-23T14:03:40.741273+00:00 https://vulnerability.circl.lu/sighting/44ef6116-58cc-4c7f-a807-436198d1354f/export 2026-08-03T22:53:55.551536+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "44ef6116-58cc-4c7f-a807-436198d1354f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b3fc44a9-bc78-4116-8736-792c5b131925", "content": "", "creation_timestamp": "2026-06-19T12:45:14.119457Z"} 2026-06-19T12:45:14.119457+00:00