https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 23 Sep 2026 13:34:43 +0000 https://vulnerability.circl.lu/sighting/fff8a7c7-825a-4353-9679-b508532ffcb4/export {"uuid": "fff8a7c7-825a-4353-9679-b508532ffcb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6studqtb2x", "content": "\ud83d\udd17 CVE : CVE-2026-94127", "creation_timestamp": "2026-09-23T13:10:06.361263Z"} {"uuid": "fff8a7c7-825a-4353-9679-b508532ffcb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6studqtb2x", "content": "\ud83d\udd17 CVE : CVE-2026-94127", "creation_timestamp": "2026-09-23T13:10:06.361263Z"} https://vulnerability.circl.lu/sighting/fff8a7c7-825a-4353-9679-b508532ffcb4/export Wed, 23 Sep 2026 13:10:06 +0000 https://vulnerability.circl.lu/sighting/4a220bd4-8f1a-4132-91b4-176ff5a7f218/export {"uuid": "4a220bd4-8f1a-4132-91b4-176ff5a7f218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mw6so7w3i52q", "content": "F5 patched CVE-2026-94127 today, a heap-based buffer overflow in BIG-IP APM giving unauthenticated attackers remote code execution when APM is configured as an OAuth authorization server. F5 says it has been exploited. CISA added it to KEV, federal deadline Friday.", "creation_timestamp": "2026-09-23T13:06:57.365806Z"} {"uuid": "4a220bd4-8f1a-4132-91b4-176ff5a7f218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mw6so7w3i52q", "content": "F5 patched CVE-2026-94127 today, a heap-based buffer overflow in BIG-IP APM giving unauthenticated attackers remote code execution when APM is configured as an OAuth authorization server. F5 says it has been exploited. CISA added it to KEV, federal deadline Friday.", "creation_timestamp": "2026-09-23T13:06:57.365806Z"} https://vulnerability.circl.lu/sighting/4a220bd4-8f1a-4132-91b4-176ff5a7f218/export Wed, 23 Sep 2026 13:06:57 +0000 https://vulnerability.circl.lu/sighting/f0b8997c-68cd-4bea-9cf5-faa603779881/export {"uuid": "f0b8997c-68cd-4bea-9cf5-faa603779881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/4103", "content": "\u2615 CYBERBRIEFING \u2014 Mercoled\u00ec 23 settembre 2026\n\n\u2615 CYBERBRIEFING \u2014 Mercoled\u00ec 23 settembre 2026 Il tuo riassunto quotidiano di cybersecurity da leggere con il caff\u00e8. \ud83d\udd34 IN PRIMO PIANO Zero-day critico su F5 BIG-IP APM: attacchi gi\u00e0 in corso, controllo remoto senza autenticazione \u00c8 stata scoperta una vulnerabilit\u00e0 zero-day (CVE-2026-94127) nel modulo\u2026\n\n\n\ud83d\udc49Leggi tutti gli aggiornamenti delle ultime 24 ore: https://ilpuntocyber.rfeed.it/article.php?s=2026-09-23\n\n\ud83d\udcac Se vuoi se ne pu\u00f2 discutere sul forum: https://internet-forum.it", "creation_timestamp": "2026-09-23T13:00:05.286686Z"} {"uuid": "f0b8997c-68cd-4bea-9cf5-faa603779881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/4103", "content": "\u2615 CYBERBRIEFING \u2014 Mercoled\u00ec 23 settembre 2026\n\n\u2615 CYBERBRIEFING \u2014 Mercoled\u00ec 23 settembre 2026 Il tuo riassunto quotidiano di cybersecurity da leggere con il caff\u00e8. \ud83d\udd34 IN PRIMO PIANO Zero-day critico su F5 BIG-IP APM: attacchi gi\u00e0 in corso, controllo remoto senza autenticazione \u00c8 stata scoperta una vulnerabilit\u00e0 zero-day (CVE-2026-94127) nel modulo\u2026\n\n\n\ud83d\udc49Leggi tutti gli aggiornamenti delle ultime 24 ore: https://ilpuntocyber.rfeed.it/article.php?s=2026-09-23\n\n\ud83d\udcac Se vuoi se ne pu\u00f2 discutere sul forum: https://internet-forum.it", "creation_timestamp": "2026-09-23T13:00:05.286686Z"} https://vulnerability.circl.lu/sighting/f0b8997c-68cd-4bea-9cf5-faa603779881/export Wed, 23 Sep 2026 13:00:05 +0000 https://vulnerability.circl.lu/sighting/55921b3b-dd39-4c24-a44a-22a23c148616/export {"uuid": "55921b3b-dd39-4c24-a44a-22a23c148616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://www.cert.se/2026/09/information-om-kritisk-sarbarhet-i-big-ip-apm.html", "content": "", "creation_timestamp": "2026-09-23T12:15:02.379978Z"} {"uuid": "55921b3b-dd39-4c24-a44a-22a23c148616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://www.cert.se/2026/09/information-om-kritisk-sarbarhet-i-big-ip-apm.html", "content": "", "creation_timestamp": "2026-09-23T12:15:02.379978Z"} https://vulnerability.circl.lu/sighting/55921b3b-dd39-4c24-a44a-22a23c148616/export Wed, 23 Sep 2026 12:15:02 +0000 https://vulnerability.circl.lu/sighting/099f89d3-e035-404d-833b-b27469cb1ee4/export {"uuid": "099f89d3-e035-404d-833b-b27469cb1ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mw6obmqekk2f", "content": "CVE-2026-94127 is trending. Hype score 10, currently #2 on cvemon.\n\nWhen a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-94127", "creation_timestamp": "2026-09-23T11:48:19.022216Z"} {"uuid": "099f89d3-e035-404d-833b-b27469cb1ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mw6obmqekk2f", "content": "CVE-2026-94127 is trending. Hype score 10, currently #2 on cvemon.\n\nWhen a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-94127", "creation_timestamp": "2026-09-23T11:48:19.022216Z"} https://vulnerability.circl.lu/sighting/099f89d3-e035-404d-833b-b27469cb1ee4/export Wed, 23 Sep 2026 11:48:19 +0000 https://vulnerability.circl.lu/sighting/2ad08f02-9256-42e2-9b8d-a48560faccd8/export {"uuid": "2ad08f02-9256-42e2-9b8d-a48560faccd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mw6o3m6xjc2f", "content": "When that alert wakes you up at 3am, don't call it a \"potential anomaly. It's unauthenticated remote code execution on your perimeter. For anyone running F5 BIG-IP APM, that is exactly what CVE-2026-94127 is.\n\n#vulnerability #infosec", "creation_timestamp": "2026-09-23T11:44:57.379181Z"} {"uuid": "2ad08f02-9256-42e2-9b8d-a48560faccd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mw6o3m6xjc2f", "content": "When that alert wakes you up at 3am, don't call it a \"potential anomaly. It's unauthenticated remote code execution on your perimeter. For anyone running F5 BIG-IP APM, that is exactly what CVE-2026-94127 is.\n\n#vulnerability #infosec", "creation_timestamp": "2026-09-23T11:44:57.379181Z"} https://vulnerability.circl.lu/sighting/2ad08f02-9256-42e2-9b8d-a48560faccd8/export Wed, 23 Sep 2026 11:44:57 +0000 https://vulnerability.circl.lu/sighting/5fb666d3-1349-49ff-ae6d-7b891ce63e40/export {"uuid": "5fb666d3-1349-49ff-ae6d-7b891ce63e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw6nbllrjm2d", "content": "F5 has patched a critical BIG-IP APM zero-day, CVE-2026-94127, exploited in remote code execution attacks on systems with OAuth authorization server settings enabled. #F5 #BIGIPAPM #CVE202694127", "creation_timestamp": "2026-09-23T11:30:24.061969Z"} {"uuid": "5fb666d3-1349-49ff-ae6d-7b891ce63e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw6nbllrjm2d", "content": "F5 has patched a critical BIG-IP APM zero-day, CVE-2026-94127, exploited in remote code execution attacks on systems with OAuth authorization server settings enabled. #F5 #BIGIPAPM #CVE202694127", "creation_timestamp": "2026-09-23T11:30:24.061969Z"} https://vulnerability.circl.lu/sighting/5fb666d3-1349-49ff-ae6d-7b891ce63e40/export Wed, 23 Sep 2026 11:30:24 +0000 https://vulnerability.circl.lu/sighting/25aa04cc-05fd-4947-866c-aa1892ea49fb/export {"uuid": "25aa04cc-05fd-4947-866c-aa1892ea49fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mw6mrbpgcm2x", "content": "F5 BIG-IP APM\u306b\u672a\u8a8d\u8a3cRCE\u306e\u8106\u5f31\u6027(CVE-2026-94127)\u304c\u5b58\u5728\u3002OAuth\u8a8d\u53ef\u30b5\u30fc\u30d0\u30fc\u3068\u3057\u3066\u6a5f\u80fd\u3059\u308b\u30b7\u30b9\u30c6\u30e0\u304c\u5f71\u97ff\u3092\u53d7\u3051\u3001\u653b\u6483\u8005\u306f\u30ed\u30b0\u30a4\u30f3\u306a\u3057\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u3002", "creation_timestamp": "2026-09-23T11:21:17.715946Z"} {"uuid": "25aa04cc-05fd-4947-866c-aa1892ea49fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mw6mrbpgcm2x", "content": "F5 BIG-IP APM\u306b\u672a\u8a8d\u8a3cRCE\u306e\u8106\u5f31\u6027(CVE-2026-94127)\u304c\u5b58\u5728\u3002OAuth\u8a8d\u53ef\u30b5\u30fc\u30d0\u30fc\u3068\u3057\u3066\u6a5f\u80fd\u3059\u308b\u30b7\u30b9\u30c6\u30e0\u304c\u5f71\u97ff\u3092\u53d7\u3051\u3001\u653b\u6483\u8005\u306f\u30ed\u30b0\u30a4\u30f3\u306a\u3057\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u3002", "creation_timestamp": "2026-09-23T11:21:17.715946Z"} https://vulnerability.circl.lu/sighting/25aa04cc-05fd-4947-866c-aa1892ea49fb/export Wed, 23 Sep 2026 11:21:17 +0000 https://vulnerability.circl.lu/sighting/63d762fa-31d5-4767-891f-c2f85c57814d/export {"uuid": "63d762fa-31d5-4767-891f-c2f85c57814d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mw6jwfomyc2j", "content": "CRITICAL zero-day (CVE-2026-94127) in F5 BIG-IP APM (OAuth Auth Server) enables unauth RCE. Actively exploited. Patch hotfixes for 21.1.0, 17.5.0 \u2013 17.5.1, 17.1.0 \u2013 17.1.3 ASAP. https://radar.offseq.com/threat/critical-f5-big-ip-vulnerability-exploited-as-zero-day-024f528e7ee83eed #OffSeq #F5 #Ze...", "creation_timestamp": "2026-09-23T10:30:28.494768Z"} {"uuid": "63d762fa-31d5-4767-891f-c2f85c57814d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mw6jwfomyc2j", "content": "CRITICAL zero-day (CVE-2026-94127) in F5 BIG-IP APM (OAuth Auth Server) enables unauth RCE. Actively exploited. Patch hotfixes for 21.1.0, 17.5.0 \u2013 17.5.1, 17.1.0 \u2013 17.1.3 ASAP. https://radar.offseq.com/threat/critical-f5-big-ip-vulnerability-exploited-as-zero-day-024f528e7ee83eed #OffSeq #F5 #Ze...", "creation_timestamp": "2026-09-23T10:30:28.494768Z"} https://vulnerability.circl.lu/sighting/63d762fa-31d5-4767-891f-c2f85c57814d/export Wed, 23 Sep 2026 10:30:28 +0000 https://vulnerability.circl.lu/sighting/71208054-9caa-433c-8e85-be5eedb4e2e5/export {"uuid": "71208054-9caa-433c-8e85-be5eedb4e2e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117319888106479032", "content": "F5 BIG-IP APM (OAuth Authorization Server) is facing a CRITICAL RCE zero-day, CVE-2026-94127, with active exploitation. Versions 21.1.0, 17.5.0 \u2013 17.5.1, 17.1.0 \u2013 17.1.3 affected. Apply hotfixes now. Details: https://radar.offseq.com/threat/critical-f5-big-ip-vulnerability-exploited-as-zero-day-024f528e7ee83eed #OffSeq #F5 #ZeroDay #Infosec", "creation_timestamp": "2026-09-23T10:30:26.189247Z"} {"uuid": "71208054-9caa-433c-8e85-be5eedb4e2e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117319888106479032", "content": "F5 BIG-IP APM (OAuth Authorization Server) is facing a CRITICAL RCE zero-day, CVE-2026-94127, with active exploitation. Versions 21.1.0, 17.5.0 \u2013 17.5.1, 17.1.0 \u2013 17.1.3 affected. Apply hotfixes now. Details: https://radar.offseq.com/threat/critical-f5-big-ip-vulnerability-exploited-as-zero-day-024f528e7ee83eed #OffSeq #F5 #ZeroDay #Infosec", "creation_timestamp": "2026-09-23T10:30:26.189247Z"} https://vulnerability.circl.lu/sighting/71208054-9caa-433c-8e85-be5eedb4e2e5/export Wed, 23 Sep 2026 10:30:26 +0000