128 matches found
CVE-2026-94127
CVE-2026-94127 — F5 BIG-IP APM Detection Tool Defensive Author: https://github.com/FurkanKAYAPINAR/ A defensive, non-exploit detector for CVE-2026-94127 , a heap-based buffer overflow CWE-122 in F5 BIG-IP APM that allows an unauthenticated remote attacker to achieve remote code execution RCE. CVS...
Exploit for CVE-2026-94127
CVE-2026-94127 — F5 BIG-IP APM Detection Tool Defensive A...
CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM
Overview On September 22, 2026, F5 published a security advisory for CVE-2026-94127, a critical heap-based buffer overflow vulnerability affecting F5 BIG-IP Access Policy Manager APM. The vulnerability has a CVSS v3.1 score of 9.8. An unauthenticated attacker with network access to an affected...
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager APM that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127, affects only systems in which APM serves as an OAuth authorization server, issuing access tokens to applications. F5...
F5 BIG-IP APM Version 21.1.0 OAuth Vulnerability Detection
F5 BIG-IP APM versions 17.1.0, 17.5.0, and 21.1.0 before their listed engineering hotfixes contain a heap-based buffer overflow when an APM access policy and OAuth profile are configured on the same virtual server. The included tool performs read-only version and configuration checks...
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-85102link is external Check Point Multiple Products Improper Certificate Validation Vulnerability CVE-2026-93616link is external Check Point Multiple...
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution...
F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans
Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analysis published on September 7. When Apache loads any of the three appliances' own PHP scripts, the malware adds the web shell to the copy...
PT-2025-42356
Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM affected versions not specified Description An issue exists where undisclosed traffic, when interacting with a per-request policy configured on a BIG-IP APM portal access virtual server, can cause the Traffic Management Microkern...
PT-2025-42371
Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM affected versions not specified Description A reflected cross-site scripting XSS issue exists on an unspecified page within BIG-IP APM. This allows an attacker to execute JavaScript code within the security context of a user who ...
PT-2025-42331
Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM OAuth affected versions not specified Description An out-of-bounds read issue exists in F5 BIG-IP APM OAuth, potentially leading to the leakage of sensitive memory data. When an OAuth access profile Resource Server or Resource...
EUVD-2018-7194
Malware in sbrugna...
EUVD-2017-0658
Malware in sbrugna...
EUVD-2018-17313
Malware in sbrugna...
EUVD-2013-5806
Malware in sbrugna...
EUVD-2018-7210
Malware in sbrugna...
EUVD-2018-17305
Malware in sbrugna...
EUVD-2017-15204
Malware in sbrugna...