CVE-2025-48976

highcovered by 3 sourcesfirst seen 2026-07-20

A remote, anonymous or authenticated attacker can exploit multiple vulnerabilities in Oracle Commerce to compromise confidentiality, integrity, and availability.

CSIRTS triage

vendor: F5Other

What: Multiple vulnerabilities exist in F5 products.
Who is affected: Deployments of various F5 products are affected.
Urgency: Remediation urgency is unclear due to unknown severity and no exploitation reported.
Action: Check for updates from F5 regarding these vulnerabilities.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2025-48976

Get an email if CVE-2025-48976 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Exploitation likely imminentEPSS puts this in the most-targeted tier (67.3% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 99% of all EPSS-scored CVEs.

Advisory coverage (3)

unknownF5 Products Multiple Vulnerabilitieshkcert · 2026-07-29
high[NEW] [high] Oracle Commerce: Multiple vulnerabilitiescert-bund · 2026-07-22
high[UPDATE] [high] Dell PowerProtect Data Domain OS: Multiple vulnerabilitiescert-bund · 2026-07-20

External references

NVD record for CVE-2025-48976

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2025-48976 status](https://www.csirts.com/badge/CVE-2025-48976)](https://www.csirts.com/cve/CVE-2025-48976)