CVE-2025-41430: F5 BIG-IP SSL Orchestrator

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

• F5 BIG-IP SSL Orchestrator: from 15.1.0, up to and including 15.1.9; from 16.1.0, before 16.1.4 (fixed in 16.1.4); from 17.1.0, before 17.1.3 (fixed in 17.1.3); version 17.5.0 only

Published 2025-10-15. Last modified 2026-06-17.