CVE-2025-46265: F5 f5os-A

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

• F5 f5os-A: version 1.5.1 only
• F5 f5os-C: from 1.6.0, up to and including 1.6.2

Published 2025-05-07. Last modified 2026-06-17.