CVE-2025-60013

When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may be executed, and the FIPS hardware security module (HSM) may fail to initialize. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

• CWE-78

• https://my.f5.com/manage/s/article/K000154661Vendor Advisory

Published

Oct 15, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-60007A NULL Pointer Dereference vulnerability in the chassis daem…6.8
• CVE-2025-60009An Improper Neutralization of Input During Web Page Generati…6.1
• CVE-2025-6001A Cross-Site Request Forgery (CSRF) vulnerability exists in …8.3
• CVE-2025-60010A password aging vulnerability in the RADIUS client of Junip…5.4
• CVE-2025-60011An Improper Check for Unusual or Exceptional Conditions vuln…6.9
• CVE-2025-60012Malicious configuration can lead to unauthorized file access…6.3
• CVE-2025-60015An out-of-bounds write vulnerability exists in F5OS-A and F5…6.9
• CVE-2025-60016When Diffie-Hellman (DH) group Elliptic Curve Cryptography (…8.7
• CVE-2025-60017Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow…8.2
• CVE-2025-60018glib-networking's OpenSSL backend fails to properly check th…4.8
• CVE-2025-60019glib-networking's OpenSSL backend fails to properly check th…3.7
• CVE-2025-6002An unrestricted file upload vulnerability exists in the Prod…7.2