https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 15:22:06 +0000 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1220 certfr-2026-avi-1220 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1220 https://vulnerability.circl.lu/vuln/fkie_cve-2026-94127 <p>When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth Client / Resource Server (without OAuth authorization server profiles configured) are not affected by this vulnerability.</p> <p>Impact: This vulnerability allows an unauthenticated attacker to perform remote code execution. The BIG-IP system in Appliance mode is also vulnerable. This is a data plane issue; there is no control plane exposure.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth Client / Resource Server (without OAuth authorization server profiles configured) are not affected by this vulnerability.</p> <p>Impact: This vulnerability allows an unauthenticated attacker to perform remote code execution. The BIG-IP system in Appliance mode is also vulnerable. This is a data plane issue; there is no control plane exposure.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-94127 https://vulnerability.circl.lu/vuln/ghsa-qppv-6jrg-hxq4 <p>When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).</p> <p>Impact: This vulnerability allows an unauthenticated attacker to perform remote code execution. The BIG-IP system in Appliance mode is also vulnerable. This is a data plane issue; there is no control plane exposure.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).</p> <p>Impact: This vulnerability allows an unauthenticated attacker to perform remote code execution. The BIG-IP system in Appliance mode is also vulnerable. This is a data plane issue; there is no control plane exposure.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://vulnerability.circl.lu/vuln/ghsa-qppv-6jrg-hxq4 https://vulnerability.circl.lu/vuln/ncsc-2026-0386 NCSC-2026-0386 https://vulnerability.circl.lu/vuln/ncsc-2026-0386