F5 Calls for Immediate Updates Following Nation-State Intrusion
⚡ TL;DR | Go Straight to the F5 Device Audit Report
⚡ TL;DR | Go Straight to the F5 Software Audit Report
On October 15, 2025, F5 disclosed that a highly sophisticated, likely nation-state actor had maintained long-term access to its environment, stealing portions of BIG-IP source code and details on still-unreleased vulnerabilities.
F5 Source-Code Stolen
F5 disclosed in advisory K000154696 that a nation-state threat actor maintained long-term access to parts of its environment and exfiltrated BIG-IP source code plus information on still-undisclosed vulnerabilities. F5 says independent reviews found no evidence of tampering with its software supply chain, build and release pipelines included, but the theft meaningfully raises the risk of tailored exploits against unpatched devices.
In response, CISA issued Emergency Directive 26-01, ordering federal agencies to inventory F5 deployments, lock down any internet-exposed management interfaces, and meet near-term deadlines, including an Oct 22 (and Oct 31) patch requirement and an Oct 29, 2025 inventory report.
October 2025 Quarterly Security Notification
In response to this breach, F5 urges customers to update their products as soon as possible using the guidance provided in their October 2025 Quarterly Security Notification. This security advisory contains a total of 44 vulnerabilities. 27 High severity, 16 medium severity, one low severity, and one security exposure.
Discover F5 Devices and Software
As per the CISA direction, it is important to identify F5 hardware and software in your IT environment as soon as possible. Utilizing the following Lansweeper reports, you’ll get an overview of hardware and software present in your IT environment.
If you’re interested in looking at what devices are affected by the October 2025 quarterly security vulnerabilities, we’ve provided links to each vulnerability inside of Lansweeper below.
F5 October 2025 Quarterly Vulnerabilities
Ready to get started?
You’ll be up and running in no time.
Explore all our features, free for 14 days.