Warning: Actively exploited CVE-2026-94127 (CVSS 9.8) enables unauthenticated remote code execution in F5 BIG-IP APM via a heap-based buffer overflow
ID: 90a4ce02-9669-5949-a0e0-61ecb2022c8a
STIX ID: report--90a4ce02-9669-5949-a0e0-61ecb2022c8a
Threat Score
Critical unauthenticated remote code execution vulnerability (CVE-2026-94127, CVSS 9.8) in F5 BIG-IP APM caused by a heap-based buffer overflow when APM and an OAuth Authorization Server profile are on the same virtual server; exploitation has been confirmed in the wild and immediate patching and enhanced detection are recommended.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.