SecurityBleepingComputer44 minutes ago
F5 Patches Exploited BIG-IP APM Zero-Day
3 min read
F5 released updates for CVE-2026-94127, a critical BIG-IP APM zero-day exploited in remote code execution attacks against OAuth Authorization Server deployments. CISA added it to its Known Exploited Vulnerabilities Catalog and ordered U.S. federal agencies to patch by Friday. Shadowserver tracks over 14,700 exposed IP addresses, and admins who cannot patch immediately can apply an iRule mitigation.
Level
Hype check
Tap to vote and see what everyone thinks.
