ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2025-10-15
•7 min read
F5 BIG-IP Appliance Mode Bypass: Brief Summary of CVE-2025-53868
A brief summary of CVE-2025-53868, a high-severity vulnerability in F5 BIG-IP Appliance mode. A highly privileged authenticated attacker with SCP and SFTP access can use undisclosed commands to bypass its security restrictions. Covers technical details, affected versions, and vendor security history, based on available sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•7 min read
F5 BIG-IP PEM CVE-2025-54479: Brief Summary of Traffic Management Microkernel DoS Vulnerability
A brief summary of CVE-2025-54479, a high-severity denial-of-service vulnerability in F5 BIG-IP Policy Enforcement Manager. Under specific configuration conditions, a remote attacker can terminate the Traffic Management Microkernel and disrupt traffic. Covers affected versions, technical details, and references.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
F5 BIG-IP APM OAuth Out-of-Bounds Read (CVE-2025-54854): Brief Summary and Technical Review
A brief summary and technical review of CVE-2025-54854, an out-of-bounds read in F5 BIG-IP APM OAuth configurations. It covers affected versions, technical details, and F5's security history, with references for further research.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
BIG-IP Advanced WAF and ASM CVE-2025-54858: Brief Summary of JSON Schema Uncontrolled Recursion Vulnerability
CVE-2025-54858 is a high-severity uncontrolled recursion vulnerability in the JSON schema processing of F5 BIG-IP Advanced WAF and ASM. This brief summary covers the technical details, affected versions, and F5's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
BIG-IP SSL Orchestrator CVE-2025-55036: Brief Summary of Out-of-Bounds Write Vulnerability
A brief summary of CVE-2025-55036, a high-severity out-of-bounds write vulnerability in F5 BIG-IP SSL Orchestrator when it is configured as an explicit forward proxy with proxy connect enabled. The post covers affected versions, technical context, and F5's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
F5 BIG-IP Advanced WAF and ASM: Brief Summary of CVE-2025-55669 HTTP/2 TMM Termination Vulnerability
CVE-2025-55669 is a high-severity vulnerability in F5 BIG-IP Advanced WAF and ASM when they are configured with server-side HTTP/2 profiles. Under certain traffic conditions, the flaw can make TMM terminate and deny service. This summary covers affected versions, the technical mechanism, and F5's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•9 min read
F5 BIG-IP CVE-2025-58096: Brief Summary of TMM Out-of-Bounds Write Denial of Service
A brief summary of CVE-2025-58096, a denial of service vulnerability in the F5 BIG-IP Traffic Management Microkernel (TMM) that depends on a non-default checksum configuration. It covers the technical details, affected versions, and F5's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
F5 BIG-IP Next HTTP2 Ingress NULL Pointer Dereference (CVE-2025-58120): Brief Summary and Technical Review
CVE-2025-58120 is a high-severity NULL pointer dereference in F5 BIG-IP Next SPK, CNF, and Kubernetes products with HTTP2 Ingress enabled. This summary covers the affected versions, the technical root cause, and F5's security history, based on available public sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•11 min read
BIG-IP AFM CVE-2025-59478: Brief Summary of DoS Protection Profile Vulnerability
CVE-2025-59478 is a high-severity denial-of-service vulnerability in F5 BIG-IP AFM DoS protection profiles. This summary covers the affected versions, the technical root cause, and F5's security history, with links to the official advisories.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
F5 BIG-IP CVE-2025-59481 Privilege Escalation: Brief Summary and Technical Review
CVE-2025-59481 is a privilege escalation vulnerability in F5 BIG-IP iControl REST and tmsh. This summary covers the affected versions, the technical details, and F5's security history, with links to the official advisories and research.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
F5 VELOS F5OS-C Partition Control Plane: CVE-2025-59778 Resource Allocation Vulnerability – Brief Summary
A brief summary of CVE-2025-59778, a resource allocation vulnerability in F5 VELOS F5OS-C partition control planes that have the Allowed IP Addresses feature enabled. It covers affected versions, technical details, and F5's security history, based on available advisories and technical documentation.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
F5 BIG-IP CVE-2025-61951: Brief Summary of DTLS 1.2 TMM Out-of-Bounds Read Denial of Service
CVE-2025-61951 is a high-severity out-of-bounds read vulnerability in the Traffic Management Microkernel (TMM) of F5 BIG-IP systems configured for DTLS 1.2 with specific Server SSL profile settings. This summary covers the technical details, affected versions, and F5's security history, with references for further reading.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
F5OS-A and F5OS-C Privilege Escalation (CVE-2025-61955): Brief Summary and Technical Review
A brief summary and technical review of CVE-2025-61955, a high-severity privilege escalation vulnerability in F5OS-A and F5OS-C. Based on available public information, it covers the technical mechanism, affected versions, and the vendor's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
F5 BIG-IP CVE-2025-61958: Brief Summary of tmsh iHealth Appliance Mode Bypass
A brief summary of CVE-2025-61958, a privilege escalation vulnerability in the iHealth utility of F5 BIG-IP's tmsh. The post covers the technical details, affected versions, and F5's vendor history, with a focus on the risk to Appliance mode deployments. It does not include a PoC, patch, or detection information.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•9 min read
F5 BIG-IP APM CVE-2025-61960: Brief Summary of a Remote Denial of Service Vulnerability
CVE-2025-61960 is a remote denial-of-service vulnerability in F5 BIG-IP Access Policy Manager portal access. This summary covers the affected versions, the technical root cause, and F5's security history, based on publicly available information.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•7 min read
Orion SMS OTP Verification CVE-2025-9967: Privilege Escalation via Account Takeover – Brief Summary
A brief summary of CVE-2025-9967, which affects all versions up to 1.1.7 of the Orion SMS OTP Verification plugin for WordPress. It covers the technical details of the authentication bypass and privilege escalation flaw, the affected versions, and the vendor's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-14
•8 min read
Brief Look: Heap-Based Buffer Overflow in Fortinet fgfmsd (CVE-2024-50571)
A short summary of CVE-2024-50571, a heap-based buffer overflow in Fortinet's fgfmsd daemon that affects FortiAnalyzer, FortiManager, FortiOS, and FortiProxy. It covers the affected versions, the technical details, and Fortinet's security history, drawn from public sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-14
•7 min read
Ivanti EPMM CVE-2025-10242 OS Command Injection: Brief Summary and Technical Review
A brief summary and technical review of CVE-2025-10242, an OS command injection vulnerability in the admin panel of Ivanti Endpoint Manager Mobile (EPMM) versions before 12.6.0.2, 12.5.0.4, and 12.4.0.4. Remote authenticated attackers with admin privileges can use it to achieve remote code execution. The post includes patch information and affected version details.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-14
•7 min read
Ivanti EPMM CVE-2025-10243: Brief Summary of OS Command Injection in Admin Panel
CVE-2025-10243 is an OS command injection vulnerability in the admin panel of Ivanti Endpoint Manager Mobile (EPMM) versions before 12.6.0.2, 12.5.0.4, and 12.4.0.4. Authenticated admin users can exploit it for remote code execution. This post covers the technical details, the affected versions, and Ivanti's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-14
•8 min read
Ivanti EPMM CVE-2025-10985 OS Command Injection: Brief Summary and Technical Review
A brief summary and technical review of CVE-2025-10985, an OS command injection vulnerability in Ivanti Endpoint Manager Mobile (EPMM) prior to versions 12.6.0.2, 12.5.0.4, and 12.4.0.4. Authenticated admin users can execute arbitrary OS commands, which can lead to remote code execution. Covers the affected versions, the technical mechanism, and Ivanti's security history.
ZeroPath CVE Analysis
