CVE-2025-53856

TMM vulnerability

High8.7EPSS 0.35%

Published: 15 Oct 2025
Updated: 26 Feb 2026
Reserved: 3 Oct 2025
Assigned by: f5

Description

When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. To determine which BIG-IP platforms have an ePVA chip refer to K12837: Overview of the ePVA feature https://my.f5.com/manage/s/article/K12837 . Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Scores

CVSS scores of CVE-2025-53856, by who scored it
Scored by	CVSS	Score	Vector
f5CNA (assigner)	4.0	High8.7	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
f5CNA (assigner)	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVDNVD · Analyzed	4.0	High8.7	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (exploitation in 30 days): 0.35% · top 71% of all CVEs (7 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: yes · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.7.

Weakness

CWE-705 Incorrect Control Flow Scoping (opens in a new tab)All about CWE-705 and its CVEs

Affected products

F5 · BIG-IP
- affected 17.5.0 – < 17.5.1.3
- affected 17.1.0 – < 17.1.3
- affected 16.1.0 – < 16.1.6.1
- affected 15.1.0 – < 15.1.10.8

References (1)

https://my.f5.com/manage/s/article/K000156707 (opens in a new tab)vendor-advisory

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2025-53856](https://trackcve.app/badge/CVE-2025-53856.svg)](https://trackcve.app/cve/CVE-2025-53856)

Record last updated 26 Feb 2026, 16:57 UTC.