BIG-IP

Reported Context (4)

CVE-2026-94127 is an unauthenticated heap buffer overflow in F5 BIG-IP APM enabling remote code execution. CVE-2026-94127 Exploits F5 BIG-IP APM Heap Overflow for Unauthenticated RCE
a security advisory for CVE-2026-94127, a critical heap-based buffer overflow vulnerability affecting F5 BIG-IP Access Policy Manager (APM). The vulnerability has a CVSS v3.1 score of 9.8. An unauthenticated attacker Critical F5 BIG-IP APM Flaw Enables Unauthenticated Remote Code Execution
Those vulnerabilities spanned 2016 through 2025 and affected Microsoft Exchange and SharePoint, Fortinet FortiOS, Cisco IOS XE, F5 BIG-IP, GeoServer, Apache Shiro, and other public-facing technologies. Recorded Future Reports 215 Actively Exploited CVEs and Expanding Supply-Chain Threats in H1 2026
F5 BIG-IP Recorded Future Reported 59 High-Impact Vulnerabilities in June, 56 Actively Exploited

CVE (61)

Malware (54)

People (1)

Threat Actors (18)

MITRE ATT&CK (13)

Vendors (44)

Products (110)

Tools (13)

Industries (10)

Countries (10)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.