CISA Adds F5 BIG‑IP APM RCE Flaw to KEV

CISA added CVE-2025-53521 in F5 BIG-IP Access Policy Manager to its Known Exploited Vulnerabilities catalog after evidence of active exploitation.

Part of the PlainSec briefing for 2026-04-02

Sources

• Help Net Security
• BleepingComputer
• SecurityWeek
• UK NCSC
• Dark Reading
• Dark Reading
• CSO Online
• Cybersecurity Dive