Skip to content
Threat Feed
Subscribe

Product

BIG-IP APM

2 briefs RSS
critical advisory

Critical RCE Vulnerability in F5 BIG-IP APM

An unauthenticated remote code execution vulnerability (CVE-2026-94127) exists in F5 BIG-IP APM when an OAuth profile is configured on a virtual server, allowing attackers to execute arbitrary code via malformed traffic.

BIG-IP APM cve rce network-security f5
1t 1c
medium advisory

F5 BIG-IP APM Undisclosed Traffic Denial-of-Service Vulnerability (CVE-2026-40067)

A vulnerability exists in F5 BIG-IP APM where, when an APM access policy is configured on a virtual server, undisclosed network traffic can cause the apmd process to terminate, resulting in a denial of service (CVE-2026-40067).

BIG-IP APM dos cve-2026-40067 f5
2r 1t 1c