Most recent entries from all

certfr-2026-avi-1220 — Une vulnérabilité a été découverte dans F5 BIG-IP. Elle permet à un attaquant de provoquer une exécution de code arbitr…

2026-10-02T11:58:41.200887+00:00

certfr-2026-avi-1220

EUVD-2026-373927

2026-10-02T11:58:41.200939+00:00

EUVD-2026-373927

fkie_cve-2026-94127

2026-10-02T11:58:41.200963+00:00

When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth Client / Resource Server (without OAuth authorization server profiles configured) are not affected by this vulnerability.

Impact: This vulnerability allows an unauthenticated attacker to perform remote code execution. The BIG-IP system in Appliance mode is also vulnerable. This is a data plane issue; there is no control plane exposure.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

GHSA-qppv-6jrg-hxq4

2026-10-02T11:58:41.201032+00:00

When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

NCSC-2026-0386 — Kwetsbaarheid verholpen in F5 Networks BIG-IP Access Policy Manager

2026-10-02T11:58:41.201075+00:00

NCSC-2026-0386

WID-SEC-W-2026-3517 — F5 BIG-IP APM: Schwachstelle ermöglicht Codeausführung

2026-10-02T11:58:41.201107+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in F5 BIG-IP APM ausnutzen, um beliebigen Programmcode auszuführen.