Fortinet BIG-IP Vulnerability Reclassified as RCE, Under Exploitation
2026-03-30T20:51:35Z•b23108b14f519632d4381d2d1c498a10dbc854d0d52243644e04a8b76176421e
BIG-IPFortinetIoC monitoringRCEactive exploitationincident responsenetwork appliancepatch nowremote code executionvulnerability
What happened
CVE-2025-53521, a Fortinet BIG‑IP flaw first disclosed as a high‑severity DoS, has been reclassified as a remote code execution vulnerability and is reported to be under active exploitation. A successful exploit can yield arbitrary code execution on affected BIG‑IP appliances, enabling full device takeover, network pivoting, and data exfiltration. Organizations should treat this as an urgent patch-and-mitigate event for internet‑exposed BIG‑IP instances.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- b23108b14f519632d4381d2d1c498a10dbc854d0d52243644e04a8b76176421e
- Enrichment time
- 2026-03-30T20:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.