F5 BIG-IP APM 的严重漏洞引发紧急安全警告并拖累股价

关键事实

1A critical unauthenticated remote code execution vulnerability (CVE-2025-53521) has been identified in F5 BIG-IP Access Policy Manager.

2The UK NCSC confirmed that the vulnerability is currently being actively exploited.

3Authorities recommend that organizations isolate or fully rebuild affected systems and update them immediately.

随着漏洞 CVE-2025-53521 被评为 9.8 分（满分 10 分）的近乎最高严重程度，围绕 F5 BIG-IP Access Policy Manager 的安全危机进一步加剧。英国国家网络安全中心 (NCSC) 确认了这一远程代码执行 (RCE) 漏洞正被积极利用，促使 F5 发布了特定的入侵指标 (IoC) 以协助检测违规行为。新的补救指南已显著升级，建议组织在怀疑遭到入侵时应完全重建系统，而不仅仅是依赖软件补丁。这一事态发展对依赖 F5 技术的全球企业和政府网络基础设施构成了严重威胁。在财务方面，由于潜在的声誉受损以及与这些激进恢复措施相关的高昂运营成本，F5 Inc. (FFIV) 股价持续承压。投资者正密切关注局势，因为该漏洞的极端严重性可能会影响公司的长期业绩和更广泛的技术指数。

7 days ago

免费注册以访问此内容

创建免费账户

版本历史

3 个额外来源确认了此报道

版本 27 days ago

变更内容: Updated to include the critical severity score of 9.8/10, the release of indicators of compromise (IoCs), and the escalation of remediation advice to include full system rebuilds.

版本 18 days ago

变更内容: The story was updated to reflect the reclassification of the vulnerability from a DoS issue to a critical RCE flaw, along with new security guidance advising organizations to assume active compromise.