CISA ordered immediate action after serious vulnerabilities in F5 devices were linked to active compromise.