Vulnerability · Published Oct 15, 2025 · Assigned by f5

CVE-2025-53856TMM vulnerability

High 7.5

In plain English

A high-severity security flaw in BIG-IP from F5. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 29% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.3%top 71.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. To determine which BIG-IP platforms have an ePVA chip refer to K12837: Overview of the ePVA feature https://my.f5.com/manage/s/article/K12837 . Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products (as reported)

Vendor	Product	Versions
F5	BIG-IP	17.5.0 – before 17.5.1.317.1.0 – before 17.1.316.1.0 – before 16.1.6.115.1.0 – before 15.1.10.8

Weakness: CWE-705 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://my.f5.com/manage/s/article/K000156707 vendor-advisory