HIGHVulnerability
Verified
Global

CISA KEV: F5 BIG-IP APM — F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution.

Analysis

F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-22. Remediation due: 2026-09-25.

Indicators of Compromise (1)

CVE (1)
CVE-2026-94127
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 22, 2026. Verified by: CISA.

Related Threats

LOWVulnerabilityNEW

The Fine Art of Frustrating the Adversary

What really frustrates an adversary? Eight Cisco Talos researchers share practical ways to make their next move slower and riskier. From deception and behavioral detection to breaking attack dependencies and resisting manufactured urgency.

Cisco Talos
MEDIUMVulnerabilityNEW

Hackers stole Pentagon personnel records of over 3 million people

The Pentagon's Defense Manpower Data Center (DMDC) is notifying millions of military service members that hackers stole their data after breaching the Pentagon's human resources management system in October 2025. [...]

BleepingComputer
MEDIUMVulnerabilityNEW

AI Threats Top Cybersecurity Preparedness Gap, PwC Finds

PwC finds global security leaders are most concerned about attacks on AI systems

Infosecurity Magazine