Loading story…
F5 published product advisories addressing two Intel flaws affecting underlying platform components used in its ecosystem: CVE-2025-24303, an Intel 800 Series Ethernet vulnerability, and CVE-2025-20027, an Intel UEFI vulnerability. The notices indicate vendor tracking and customer guidance for issues tied to both network interface hardware and firmware layers, expanding the scope of exposure beyond application software into foundational infrastructure components.
The paired advisories highlight risk across separate parts of the technology stack, with one issue involving Intel's 800 Series Ethernet technology and the other affecting Intel's UEFI environment. Organizations using F5 products are likely to review affected versions, platform dependencies, and available remediation or mitigation guidance in the vendor bulletins to determine whether appliance, firmware, or hardware-related updates are required.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
F5 issued a product advisory for the Intel UEFI vulnerability tracked as CVE-2025-20027. The reference does not include a synopsis or further event details.
F5 issued a product advisory بشأن the Intel 800 Series Ethernet vulnerability tracked as CVE-2025-24303. No additional synopsis or technical details were provided in the reference.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
F5 published product advisories covering two separate upstream security flaws affecting widely used core components: **Linux kernel** vulnerability `CVE-2025-40154` and **OpenSSL** vulnerability `CVE-2025-68160`. The notices indicate vendor tracking and assessment activity for vulnerabilities in foundational software commonly embedded in network, application delivery, and security appliances. The advisories were released through F5's product advisory channel under knowledge base articles `K000160420` and `K000160552`. While the referenced notices provide limited public synopsis text, the combined updates show F5 alerting customers to potential product impact from both an operating system kernel issue and a cryptographic library flaw, signaling the need for customers to review affected-product guidance and remediation information as it becomes available.
Jun 29, 2026
F5 published security advisories regarding two privilege escalation vulnerabilities affecting the Linux kernel-mode driver for Intel 700 Series Ethernet adapters, identified as CVE-2025-24486 and CVE-2025-25273. Both vulnerabilities could allow an authenticated local user to escalate privileges via improper input validation and insufficient control flow management, respectively, in driver versions prior to 2.28.5. F5 confirmed that none of its products are affected by either vulnerability after evaluating all currently supported releases. The advisories clarify that these issues do not impact F5 products, and no action is required for F5 customers. The company will not update the advisories further unless new information emerges. Customers are encouraged to review the security response policy and subscribe to notifications for future updates regarding F5 product security.
Jun 29, 2026
F5 published product advisories addressing two OpenSSL vulnerabilities, **`CVE-2026-22795`** and **`CVE-2025-69421`**, through notices **`K000160555`** and **`K000160554`**. The advisories indicate that F5 is tracking the impact of both flaws on its product portfolio and has released official guidance for customers through its support portal. While the advisories provided no public synopsis in the referenced material, the paired notices show coordinated disclosure and vendor response around multiple OpenSSL issues that could affect enterprise deployments relying on F5 products. Security teams using F5 platforms should review the vendor bulletins, determine product exposure, and apply any recommended mitigations or updates tied to **OpenSSL** components.
Jun 29, 2026