A Vulnerability in F5 BIG-IP Access Policy Manager Could Allow for Remote Code Execution
ID: ddcfe9f2-572d-58ab-a87a-482499a08577
STIX ID: report--ddcfe9f2-572d-58ab-a87a-482499a08577
Feed Name: CISecurity.org Advisories
Threat Score
A critical vulnerability (CVE-2026-94127) in F5 BIG-IP Access Policy Manager (APM) can be triggered when an APM access policy and an OAuth profile are configured on a virtual server, allowing unauthenticated remote code execution against the data plane (including Appliance mode). Successful exploitation could give an attacker full control of the affected system; the report classifies this as an Initial Access tactic using the Exploit Public-Facing Application technique.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.