Forwarded by Taiwan Computer Network Crisis Response and Coordination Center (TWCERTCC-200-202510-00000010)

[Description]
Recently, multi-cloud application service and security vendor F5 released two critical security vulnerabilities (CVE-2025-57780, CVSS 3.x: 8.8 and CVE-2025-61955, CVSS: 8.8). Both vulnerabilities allow an authenticated attacker with local access to escalate privileges and execute arbitrary system commands.

[Affected Platforms]
● F5OS - Appliance 1.8.0
● F5OS - Appliance 1.5.1 to 1.5.3
● F5OS - Chassis 1.8.0 to 1.8.1
● F5OS - Chassis 1.6.0 to 1.6.2

[Recommended Action]
Please update to the following versions:
F5OS - Appliance 1.8.3
F5OS - Appliance 1.5.4
F5OS - Chassis 1.8.2
F5OS - Chassis 1.6.4

[References]
https://www.twcert.org.tw/tw/cp-169-10448-d4b78-1.html