CVE-2026-94127

F5 BIG-IP APM Zero-Day CVE-2026-94127 Actively Exploited for RCE

F5 BIG-IP APM deployments configured as OAuth authorization servers are affected by CVE-2026-94127, a critical heap-based buffer overflow that can allow unauthenticated remote code execution and is being exploited in the wild.