CVE-2025-46265

On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Score

CVSS 3.1 8.8 High

Status

Analyzed - f5sirt@f5.com

Published

2025-05-07

Last modified

2026-02-26

Weaknesses

CWE-863

Affected products

• F5os-a (F5)
• F5os-c (F5)
• F5os - Appliance (F5)
• F5os - Chassis (F5)

References

• https://my.f5.com/manage/s/article/K000139503