CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation

Reported by SOCRadar (ameer)

Summary by Cyber Security News24 Sep 2026, 13:14 CEST

About this summary. This is a short, independently written summary of an article first published by SOCRadar. Cyber Security News did not report or verify the underlying story. Read the original: https://socradar.io/blog/cve-2026-94127-f5-big-ip-apm-rce/

CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation F5 has released emergency engineering hotfixes for CVE-2026-94127, a critical heap-based buffer overflow in BIG-IP Access Policy Manager (APM). The vulnerability allows an unauthenticated attacker to execute code when an APM access policy and an OAuth profile are configured on the same virtual server. F5 has confirmed exploitation in the wild.

Read the full article at SOCRadar →

Source attribution: headline and facts are from SOCRadar (socradar.io). Summary method: excerpt of the source description. See our source attribution policy.