Synthèse
On 22 September 2026, F5 published an advisory addressing a critical vulnerability affecting its BIG-IP APM product. The vendor confirmed active exploitation in the wild. CERT-EU recommends taking appropriate actions as soon as possible.
On 22 September 2026, F5 published an advisory addressing a critical vulnerability affecting its BIG-IP APM product. The vendor confirmed active exploitation in the wild. CERT-EU recommends taking appropriate actions as soon as possible.
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks ↗
securityaffairs.com · 23 sept.
CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM ↗
rapid7.com · 23 sept.
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers ↗
thehackernews.com · 23 sept.
Critical F5 BIG-IP Vulnerability Exploited as Zero-Day ↗
securityweek.com · 23 sept.
F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks ↗
bleepingcomputer.com · 23 sept.
A Vulnerability in F5 BIG-IP Access Policy Manager Could Allow for Remote Code Execution ↗
cisecurity.org · 23 sept.
CORTEX