Critical Vulnerability in F5 BIG-IP APM

{
  "id": "b7d4cde75bdd18e435e27d7ac9c1cb78adc88e265572e33450f3ebbbe9ecaa66",
  "url": "https://cert.europa.eu/publications/security-advisories/2026-013/",
  "method": "llm",
  "payload": {
    "kind": "advisory",
    "title": "Critical Vulnerability in F5 BIG-IP APM",
    "summary": "F5 reported active exploitation of a heap-based buffer overflow in BIG-IP APM that may allow unauthenticated remote code execution. Affected versions are listed, but no fixed version is provided; the advisory offers an iRule-based mitigation.",
    "evidence": "F5 published an advisory addressing a critical vulnerability affecting its BIG-IP APM product. The vendor confirmed active exploitation in the wild",
    "products": [
      {
        "name": {
          "value": "BIG-IP APM",
          "evidence": "The vulnerability affects the following versions of BIG-IP APM"
        },
        "prerequisites": [
          {
            "value": "if configured with an access policy and an OAuth profile on a virtual server",
            "evidence": "if configured with an access policy and an OAuth profile on a virtual server"
          }
        ],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "17.1.0 - 17.1.3",
            "evidence": "17.1.0 - 17.1.3"
          },
          {
            "value": "17.5.0 - 17.5.1",
            "evidence": "17.5.0 - 17.5.1"
          },
          {
            "value": "21.1.0",
            "evidence": "21.1.0"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-94127",
        "evidence": "The vulnerability CVE-2026-94127, with a CVSS score of 9.8"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-cert-eu",
  "document_id": 23380,
  "published_at": null
}