CVE-2025-61938 – BIG-IP Advanced WAF and ASM bd process vulnerability

CVE ID : CVE-2025-61938

Published : Oct. 15, 2025, 2:15 p.m. | 24 minutes ago

Description : When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enforcement setting, either manually or through the automatic Policy Builder, the bd process can terminate repeatedly.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…