https://vulnerability.circl.lu/sightings/feed 2026-09-23T10:16:56.300535+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6c7e20e0-25b1-4573-9b41-16a4eb6e8152/export 2026-09-23T10:16:56.327434+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6c7e20e0-25b1-4573-9b41-16a4eb6e8152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw6j3go3bv2l", "content": "F5 and CISA say CVE-2026-94127, a critical BIG-IP APM flaw with CVSS 9.8, is being used as a zero-day for unauthenticated remote code execution. Hotfixes are available. #F5 #BIGIPAPM #CVE202694127", "creation_timestamp": "2026-09-23T10:15:22.820016Z"} 2026-09-23T10:15:22.820016+00:00 https://vulnerability.circl.lu/sighting/eb04c615-d58c-494c-aa37-e40a07a748a7/export 2026-09-23T10:16:56.329099+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "eb04c615-d58c-494c-aa37-e40a07a748a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://thehackernews.com/2026/09/f5-patches-critical-big-ip-apm-zero-day.html", "content": "Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, F5 says.\n\nThe flaw, CVE-2026-94127, affects only systems in which APM serves as an OAuth authorization server, issuing access tokens to applications. F5 disclosed it in an advisory on September 22 and has released engineering hotfixes.", "creation_timestamp": "2026-09-23T10:00:51.996183Z"} 2026-09-23T10:00:51.996183+00:00 https://vulnerability.circl.lu/sighting/a4688ebb-0090-4834-aea0-82a199986568/export 2026-09-23T10:16:56.329245+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "a4688ebb-0090-4834-aea0-82a199986568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2078", "content": "", "creation_timestamp": "2026-09-23T09:51:03.175368Z"} 2026-09-23T09:51:03.175368+00:00 https://vulnerability.circl.lu/sighting/e2ea3eab-bd79-4d65-bcde-74cfe4da2509/export 2026-09-23T10:16:56.330480+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e2ea3eab-bd79-4d65-bcde-74cfe4da2509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6fojcw7a2w", "content": "\ud83e\udd16 CVE-2026-94127: critical F5 BIG-IP APM zero-day exploited in the wild for unauthRCE. Affects systems where APM acts as OAuth auth server. Hotfixes released.\nhttps://thehackernews.com/2026/09/f5-patches-critical-big-ip-apm-zero-day.html", "creation_timestamp": "2026-09-23T09:14:27.834775Z"} 2026-09-23T09:14:27.834775+00:00 https://vulnerability.circl.lu/sighting/2064faa7-ed52-4dc1-b797-cd385d3aaf87/export 2026-09-23T10:16:56.330608+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2064faa7-ed52-4dc1-b797-cd385d3aaf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mw6dvpccpn2o", "content": "CVE-2026-94127 enables unauthenticated remote code execution on F5 BIG-IP APM when APM functions as an OAuth authorization server, requiring hotfixes.\n", "creation_timestamp": "2026-09-23T08:42:42.374459Z"} 2026-09-23T08:42:42.374459+00:00 https://vulnerability.circl.lu/sighting/c5f651c2-ec65-40c7-89ed-f5d6698fa9e3/export 2026-09-23T10:16:56.330708+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c5f651c2-ec65-40c7-89ed-f5d6698fa9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mw6dvnpyed2y", "content": "CVE-2026-94127 enables unauthenticated remote code execution on F5 BIG-IP APM when APM functions as an OAuth authorization server, requiring hotfixes.\n", "creation_timestamp": "2026-09-23T08:42:40.477831Z"} 2026-09-23T08:42:40.477831+00:00 https://vulnerability.circl.lu/sighting/f6c2f916-b0f9-4859-a6eb-f70233a4f812/export 2026-09-23T10:16:56.330805+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f6c2f916-b0f9-4859-a6eb-f70233a4f812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mw6dtt2nc22o", "content": "CVE-2026-94127 enables unauthenticated remote code execution on F5 BIG-IP APM when APM functions as an OAuth authorization server, requiring hotfixes.\n", "creation_timestamp": "2026-09-23T08:41:39.651828Z"} 2026-09-23T08:41:39.651828+00:00 https://vulnerability.circl.lu/sighting/93c75043-f0b4-468b-9fca-356ea9181f29/export 2026-09-23T10:16:56.330908+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "93c75043-f0b4-468b-9fca-356ea9181f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117319383133736126", "content": "Our CTI team identified a lot of activities targeting F5 BIG-IP (CVE-2026-94127) https://vuldb.com/vuln/408460/cti", "creation_timestamp": "2026-09-23T08:22:00.816361Z"} 2026-09-23T08:22:00.816361+00:00 https://vulnerability.circl.lu/sighting/1961f4c2-751f-4082-b16c-87dac765c37b/export 2026-09-23T10:16:56.331001+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1961f4c2-751f-4082-b16c-87dac765c37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://social.bund.de/users/bsi/statuses/117319335561645833", "content": "Der Hersteller F5 ver\u00f6ffentlichte ein Advisory zu einer ausgenutzten Zero-Day Schwachstelle in seinem Produkt BIG-IP Access Policy Manager (APM) zur sicheren Zugriffsteuerung und Anwendungszugriff: CVE-2026-94127, CVSS-Score 9.8/10 (\"kritisch\")\nF5 gibt an, dass die Schwachstelle bereits aktiv ausgenutzt wird. IT-Sicherheitsverantwortliche sollten unverz\u00fcglich die Patchst\u00e4nde pr\u00fcfen und, sofern erforderlich, die verf\u00fcgbaren Engineering Hotfixes einspielen.\n\ud83d\udc49\ufe0f https://www.bsi.bund.de/dok/1209384", "creation_timestamp": "2026-09-23T08:10:40.959112Z"} 2026-09-23T08:10:40.959112+00:00 https://vulnerability.circl.lu/sighting/1f8ee877-8af5-454d-b049-debe18f3c851/export 2026-09-23T10:16:56.331100+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1f8ee877-8af5-454d-b049-debe18f3c851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/bsi.bund.de/post/3mw6c33ncus2e", "content": "\ud83d\udce2\u2757\ufe0f Der Hersteller F5 ver\u00f6ffentlichte ein Advisory zu einer ausgenutzten Zero-Day Schwachstelle in seinem Produkt BIG-IP Access Policy Manager (APM) zur sicheren Zugriffsteuerung und Anwendungszugriff: CVE-2026-94127, CVSS-Score 9.8/10 (\"kritisch\")\n\n\ud83d\udc49\ufe0f https://www.bsi.bund.de/dok/1209384", "creation_timestamp": "2026-09-23T08:09:55.875164Z"} 2026-09-23T08:09:55.875164+00:00