Remote Code Execution Vulnerability in F5 BIG-IP APM

CVE-2026-94127

What is CVE-2026-94127?

A significant vulnerability exists in F5 BIG-IP APM when specific configurations involving OAuth profiles are applied to a virtual server. This issue can potentially allow an unauthenticated attacker to execute arbitrary code remotely, which poses a serious risk to system integrity and security. The vulnerability is linked to malicious traffic patterns targeting the access policy configuration. It's crucial for organizations using affected versions to implement necessary mitigations to protect their systems.

References