Loading story…
F5 Networks has issued a series of security advisories addressing recently disclosed vulnerabilities in various third-party software components, including LibTIFF, GnuTLS, Samba, SQLite, Apache HTTP Server, gnuplot, and the Linux kernel (brcmfmac). Each advisory provides a technical summary of the vulnerability, its potential impact, and the results of F5's internal evaluation regarding exposure in their products. In all cases except for the SQLite vulnerability (CVE-2019-8457), F5 confirmed that their products are not affected and no action is required for customers using supported versions.
The SQLite advisory (CVE-2019-8457) details a heap out-of-bounds read issue that could allow a remote, low-privileged user to crash the system by providing a maliciously crafted R-Tree table. F5 has assigned internal tracking IDs and provided guidance for customers to determine if their products are affected, including references to diagnostic tools and remediation steps. These advisories reflect F5's ongoing process of evaluating and communicating the impact of upstream vulnerabilities on their product portfolio, ensuring customers are informed about potential risks and mitigations.
See real exploitation activity before you spend the cycle.
11 events from the most recent confirmed update back to the earliest known activity.
F5 published product advisory K000158069 covering LibTIFF vulnerability CVE-2023-6277.
F5 published multiple product advisories covering Apache HTTP Server CVE-2024-47252/CVE-2025-49812, Samba CVE-2025-9640, GnuTLS CVE-2024-0567, SQLite CVE-2019-8457, and LibTIFF CVE-2023-52356.
F5 published product advisories K000158030 and K000158037 covering gnuplot CVE-2020-25969 and Linux kernel brcmfmac CVE-2022-50408.
An F5 product advisory references Samba vulnerability CVE-2025-9640 as a distinct tracked security issue.
An F5 product advisory references two Apache HTTP Server vulnerabilities, CVE-2024-47252 and CVE-2025-49812, as affecting relevant software components.
An F5 product advisory references GnuTLS vulnerability CVE-2024-0567 as a tracked security issue relevant to affected products.
An F5 product advisory references LibTIFF vulnerability CVE-2023-6277 as another separate tracked flaw in the library.
An F5 product advisory references LibTIFF vulnerability CVE-2023-52356 as a distinct security issue affecting the image-processing library.
An F5 product advisory references Linux kernel brcmfmac vulnerability CVE-2022-50408, marking it as a tracked issue for impacted environments.
An F5 product advisory references gnuplot vulnerability CVE-2020-25969 as a distinct tracked security issue relevant to affected products or components.
An F5 product advisory references SQLite vulnerability CVE-2019-8457, indicating this flaw as a tracked security issue affecting software components used in F5-related products.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
8 references tracked. Mallory keeps watching after this page renders.
my.f5.com
Open sourcemy.f5.com
Open sourcemy.f5.com
Open sourcemy.f5.com
Open sourcemy.f5.com
Open sourcemy.f5.com
Open sourcemy.f5.com
Open sourcemy.f5.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
F5 published product advisories covering two separate upstream security flaws affecting widely used core components: **Linux kernel** vulnerability `CVE-2025-40154` and **OpenSSL** vulnerability `CVE-2025-68160`. The notices indicate vendor tracking and assessment activity for vulnerabilities in foundational software commonly embedded in network, application delivery, and security appliances. The advisories were released through F5's product advisory channel under knowledge base articles `K000160420` and `K000160552`. While the referenced notices provide limited public synopsis text, the combined updates show F5 alerting customers to potential product impact from both an operating system kernel issue and a cryptographic library flaw, signaling the need for customers to review affected-product guidance and remediation information as it becomes available.
Jun 29, 2026
F5 published product advisories addressing two OpenSSL vulnerabilities, **`CVE-2026-22795`** and **`CVE-2025-69421`**, through notices **`K000160555`** and **`K000160554`**. The advisories indicate that F5 is tracking the impact of both flaws on its product portfolio and has released official guidance for customers through its support portal. While the advisories provided no public synopsis in the referenced material, the paired notices show coordinated disclosure and vendor response around multiple OpenSSL issues that could affect enterprise deployments relying on F5 products. Security teams using F5 platforms should review the vendor bulletins, determine product exposure, and apply any recommended mitigations or updates tied to **OpenSSL** components.
Jun 29, 2026
F5 published product advisories addressing two OpenSSL vulnerabilities, **CVE-2025-69420** and **CVE-2026-22796**, indicating potential impact to products that rely on the widely used cryptographic library. The advisories were released through F5's product security channel and identify the flaws as OpenSSL-related issues requiring customer review of affected product guidance. The notices provide separate tracking for each vulnerability, signaling that organizations using F5 platforms should determine whether deployed versions include affected OpenSSL components and apply vendor-recommended updates or mitigations. Security teams should prioritize asset inventory and patch validation for internet-facing and security-sensitive systems where OpenSSL exposure could increase operational risk.
Jun 29, 2026