https://exploit-radar.com/en/flux/marques/f5.xml Exploit Radar: exploited F5 vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for F5 products. 2026-09-22T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-94127/ CVE-2026-94127 — F5 BIG-IP 2026-09-22T00:00:00Z Apply the patches or mitigations from F5; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 22, 2026. https://exploit-radar.com/en/cve/CVE-2025-53521/ CVE-2025-53521 — F5 BIG-IP 2026-03-27T00:00:00Z Apply the patches or mitigations from F5; if none are available, stop using the product. For cloud services, follow the guidance from F5. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on March 27, 2026. https://exploit-radar.com/en/cve/CVE-2023-46747/ CVE-2023-46747 — F5 BIG-IP 2023-10-31T00:00:00Z Apply the patches or mitigations from F5; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 31, 2023. https://exploit-radar.com/en/cve/CVE-2023-46748/ CVE-2023-46748 — F5 BIG-IP 2023-10-31T00:00:00Z Apply the patches or mitigations from F5; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 31, 2023. https://exploit-radar.com/en/cve/CVE-2022-1388/ CVE-2022-1388 — F5 BIG-IP 2022-05-10T00:00:00Z Apply the security update from F5. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on May 10, 2022. https://exploit-radar.com/en/cve/CVE-2021-22991/ CVE-2021-22991 — F5 BIG-IP 2022-01-18T00:00:00Z Apply the security update from F5. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on January 18, 2022. https://exploit-radar.com/en/cve/CVE-2020-5902/ CVE-2020-5902 — F5 BIG-IP 2021-11-03T00:00:00Z Apply the security update from F5. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-22986/ CVE-2021-22986 — F5 BIG-IP 2021-11-03T00:00:00Z Apply the security update from F5. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.