Latest / The Digital Warfare Podcast
EP. 167: F5 BIG-IP Zero-Day CVE-2026-94127 Exploited for Remote Code Execution
Summary
A critical vulnerability in F5 BIG-IP Access Policy Manager, tracked as CVE-2026-94127, is being exploited in the wild. The flaw is a heap based buffer overflow that can allow an unauthenticated remote attacker to achieve remote code execution when a BIG-IP APM access policy and an OAuth profile are configured on the same virtual server and APM is functioning as an OAuth Authorization Server.
The affected supported versions include BIG-IP 21.1.0, 17.5.0 through 17.5.1, and 17.1.0 through 17.1.3. Deployments using APM strictly as an OAuth Client or Resource Server without OAuth…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.