https://vulnerability.circl.lu/sightings/feed 2026-10-08T15:00:36.640743+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7161556a-7681-4871-a737-53ee6f5655d1/export 2026-10-08T15:00:36.665090+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7161556a-7681-4871-a737-53ee6f5655d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mx45744vrl2h", "content": "Daily IT Security Digest \u2014 2026-10-05\nthe BIG-IP source code, internal vulnerability data, and limited customer information. This follows recent critical zero-day exploits in BIG-IP APM, including CVE-2026-94127 which enabled RCE on OAuth Authorization Servers. The combined impact of active", "creation_timestamp": "2026-10-05T05:02:33.481328Z"} 2026-10-05T05:02:33.481328+00:00 https://vulnerability.circl.lu/sighting/524d072e-18b9-401d-bded-fe48522aa87d/export 2026-10-08T15:00:36.667006+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "524d072e-18b9-401d-bded-fe48522aa87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwzmpms5hd2n", "content": "Daily IT Security Digest \u2014 2026-10-04\nNation-State Attack\nCVE-2026-94127 is a critical remote code execution zero-day in F5 BIG-IP APM (OAuth Authorization Server) affecting versions 21.1.0, 17.5.0\u201317.5.1, and 17.1.0\u201317.1.3. Hackers have stolen parts of BIG-IP source code and internal vulnerability", "creation_timestamp": "2026-10-04T05:02:14.318444Z"} 2026-10-04T05:02:14.318444+00:00 https://vulnerability.circl.lu/sighting/3379db6d-dc2d-4eac-aec9-d9eedc9e8502/export 2026-10-08T15:00:36.667200+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3379db6d-dc2d-4eac-aec9-d9eedc9e8502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwx4btgzbw2y", "content": "Daily IT Security Digest \u2014 2026-10-03\nsource code, internal vulnerability data, and limited customer information. F5 reported a separate critical RCE zero-day (CVE-2026-94127) being actively exploited for remote code execution on OAuth Authorization Servers \u2014 CISA has confirmed exploitation.", "creation_timestamp": "2026-10-03T05:02:52.128623Z"} 2026-10-03T05:02:52.128623+00:00 https://vulnerability.circl.lu/sighting/df924e64-bca5-46ef-ba5d-19b9e8d72349/export 2026-10-08T15:00:36.667375+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "df924e64-bca5-46ef-ba5d-19b9e8d72349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwuls2uen52r", "content": "Daily IT Security Digest \u2014 2026-10-02\nwhich hackers stole parts of the BIG-IP source code, internal vulnerability data, and limited customer information. This compounds the recently disclosed CVE-2026-94127, a critical RCE zero-day in BIG-IP's OAuth Authorization Server that is already being", "creation_timestamp": "2026-10-02T05:02:23.703680Z"} 2026-10-02T05:02:23.703680+00:00 https://vulnerability.circl.lu/sighting/7267ed7a-fd65-4d6d-93b5-3b427f77c2b3/export 2026-10-08T15:00:36.667525+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7267ed7a-fd65-4d6d-93b5-3b427f77c2b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mws3cupyaj27", "content": "Daily IT Security Digest \u2014 2026-10-01\ncustomer information. This compounds the already critical CVE-2026-94127 zero-day, an RCE flaw in the BIG-IP APM OAuth Authorization Server that is being actively exploited. Systems running versions 21.1.0, 17.5.0\u201317.5.1, and 17.1.0\u201317.1.3 should apply hotfixes", "creation_timestamp": "2026-10-01T05:02:14.772025Z"} 2026-10-01T05:02:14.772025+00:00 https://vulnerability.circl.lu/sighting/b562b773-69b9-454f-8aab-079a25392e1e/export 2026-10-08T15:00:36.667700+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b562b773-69b9-454f-8aab-079a25392e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mwo4h46xo32q", "content": "CVE-2026-94127: F5 BIG-IP APM Zero-Day Triggers Three-Day CISA Deadline", "creation_timestamp": "2026-09-29T15:11:52.125205Z"} 2026-09-29T15:11:52.125205+00:00 https://vulnerability.circl.lu/sighting/14c9104d-4910-47a6-907f-184b4769495e/export 2026-10-08T15:00:36.667850+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "14c9104d-4910-47a6-907f-184b4769495e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwn2gvuspi2s", "content": "Daily IT Security Digest \u2014 2026-09-29\ncode, internal vulnerability data, and limited customer information. This compounds the existing critical zero-day CVE-2026-94127 (RCE in BIG-IP APM OAuth Authorization Server) which is actively exploited in the wild. Organizations should apply available", "creation_timestamp": "2026-09-29T05:03:17.763388Z"} 2026-09-29T05:03:17.763388+00:00 https://vulnerability.circl.lu/sighting/86425aba-4b96-4094-b882-220161473aae/export 2026-10-08T15:00:36.667991+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "86425aba-4b96-4094-b882-220161473aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwm4hainmw2l", "content": "~Checkpoint~\nActive exploitation targets critical Check Point, F5 and WordPress flaws.\n-\nIOCs: CVE-2026-85102, CVE-2026-93616, CVE-2026-94127\n-\n#Exploitation #Ransomware #ThreatIntel", "creation_timestamp": "2026-09-28T20:06:36.856721Z"} 2026-09-28T20:06:36.856721+00:00 https://vulnerability.circl.lu/sighting/067d3bd7-e15c-4aa4-9eba-df62b73c29fc/export 2026-10-08T15:00:36.668130+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "067d3bd7-e15c-4aa4-9eba-df62b73c29fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwlngisnft2d", "content": "Daily IT Security Digest \u2014 2026-09-28\nZero-Day**\nF5 Networks confirmed a nation-state attack resulting in the theft of parts of its BIG-IP source code and internal vulnerability data. The company is also under attack via CVE-2026-94127, a critical RCE zero-day in BIG-IP's OAuth Authorization Server", "creation_timestamp": "2026-09-28T15:37:45.748708Z"} 2026-09-28T15:37:45.748708+00:00 https://vulnerability.circl.lu/sighting/df279f74-791a-44ba-a4cf-363dbdbad682/export 2026-10-08T15:00:36.668266+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "df279f74-791a-44ba-a4cf-363dbdbad682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/jpjj.jp/post/3mwkdkzklyi2c", "content": "F5\u306e\u901a\u4fe1\u5236\u5fa1\u6a5f\u5668\u306b\u8a8d\u8a3c\u306a\u3057\u3067\u9060\u9694\u64cd\u4f5c\u3055\u308c\u308b\u6b20\u9665\u3000\u3059\u3067\u306b\u60aa\u7528\u3000JPCERT/CC\u300c\u56fd\u5185\u3067\u5e83\u304f\u5229\u7528\u300d\u3000\u6df1\u523b\u5ea6\u306f10\u70b9\u6e80\u70b9\u306e9.8\n\nJPCERT/CC\u306f9\u670824\u65e5\u3001\u7c73F5\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u6a5f\u5668\u300cBIG-IP APM\u300d\u306b\u3001\u8a8d\u8a3c\u3092\u53d7\u3051\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u9060\u9694\u304b\u3089\u4efb\u610f\u306e\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3067\u304d\u308b\u6b20\u9665\uff08CVE-2026-94127\uff09\u304c\u3042\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u51fa\u3057\u305f\u3002\n\n#\u65e5\u672c\u6642\u4e8b\u65b0\u805e #\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-09-28T03:08:41.900989Z"} 2026-09-28T03:08:41.900989+00:00