https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:42:05 +0000 https://vulnerability.circl.lu/sighting/7161556a-7681-4871-a737-53ee6f5655d1/export {"uuid": "7161556a-7681-4871-a737-53ee6f5655d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mx45744vrl2h", "content": "Daily IT Security Digest \u2014 2026-10-05\nthe BIG-IP source code, internal vulnerability data, and limited customer information. This follows recent critical zero-day exploits in BIG-IP APM, including CVE-2026-94127 which enabled RCE on OAuth Authorization Servers. The combined impact of active", "creation_timestamp": "2026-10-05T05:02:33.481328Z"} {"uuid": "7161556a-7681-4871-a737-53ee6f5655d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mx45744vrl2h", "content": "Daily IT Security Digest \u2014 2026-10-05\nthe BIG-IP source code, internal vulnerability data, and limited customer information. This follows recent critical zero-day exploits in BIG-IP APM, including CVE-2026-94127 which enabled RCE on OAuth Authorization Servers. The combined impact of active", "creation_timestamp": "2026-10-05T05:02:33.481328Z"} https://vulnerability.circl.lu/sighting/7161556a-7681-4871-a737-53ee6f5655d1/export Mon, 05 Oct 2026 05:02:33 +0000 https://vulnerability.circl.lu/sighting/524d072e-18b9-401d-bded-fe48522aa87d/export {"uuid": "524d072e-18b9-401d-bded-fe48522aa87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwzmpms5hd2n", "content": "Daily IT Security Digest \u2014 2026-10-04\nNation-State Attack\nCVE-2026-94127 is a critical remote code execution zero-day in F5 BIG-IP APM (OAuth Authorization Server) affecting versions 21.1.0, 17.5.0\u201317.5.1, and 17.1.0\u201317.1.3. Hackers have stolen parts of BIG-IP source code and internal vulnerability", "creation_timestamp": "2026-10-04T05:02:14.318444Z"} {"uuid": "524d072e-18b9-401d-bded-fe48522aa87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwzmpms5hd2n", "content": "Daily IT Security Digest \u2014 2026-10-04\nNation-State Attack\nCVE-2026-94127 is a critical remote code execution zero-day in F5 BIG-IP APM (OAuth Authorization Server) affecting versions 21.1.0, 17.5.0\u201317.5.1, and 17.1.0\u201317.1.3. Hackers have stolen parts of BIG-IP source code and internal vulnerability", "creation_timestamp": "2026-10-04T05:02:14.318444Z"} https://vulnerability.circl.lu/sighting/524d072e-18b9-401d-bded-fe48522aa87d/export Sun, 04 Oct 2026 05:02:14 +0000 https://vulnerability.circl.lu/sighting/3379db6d-dc2d-4eac-aec9-d9eedc9e8502/export {"uuid": "3379db6d-dc2d-4eac-aec9-d9eedc9e8502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwx4btgzbw2y", "content": "Daily IT Security Digest \u2014 2026-10-03\nsource code, internal vulnerability data, and limited customer information. F5 reported a separate critical RCE zero-day (CVE-2026-94127) being actively exploited for remote code execution on OAuth Authorization Servers \u2014 CISA has confirmed exploitation.", "creation_timestamp": "2026-10-03T05:02:52.128623Z"} {"uuid": "3379db6d-dc2d-4eac-aec9-d9eedc9e8502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwx4btgzbw2y", "content": "Daily IT Security Digest \u2014 2026-10-03\nsource code, internal vulnerability data, and limited customer information. F5 reported a separate critical RCE zero-day (CVE-2026-94127) being actively exploited for remote code execution on OAuth Authorization Servers \u2014 CISA has confirmed exploitation.", "creation_timestamp": "2026-10-03T05:02:52.128623Z"} https://vulnerability.circl.lu/sighting/3379db6d-dc2d-4eac-aec9-d9eedc9e8502/export Sat, 03 Oct 2026 05:02:52 +0000 https://vulnerability.circl.lu/sighting/df924e64-bca5-46ef-ba5d-19b9e8d72349/export {"uuid": "df924e64-bca5-46ef-ba5d-19b9e8d72349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwuls2uen52r", "content": "Daily IT Security Digest \u2014 2026-10-02\nwhich hackers stole parts of the BIG-IP source code, internal vulnerability data, and limited customer information. This compounds the recently disclosed CVE-2026-94127, a critical RCE zero-day in BIG-IP's OAuth Authorization Server that is already being", "creation_timestamp": "2026-10-02T05:02:23.703680Z"} {"uuid": "df924e64-bca5-46ef-ba5d-19b9e8d72349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwuls2uen52r", "content": "Daily IT Security Digest \u2014 2026-10-02\nwhich hackers stole parts of the BIG-IP source code, internal vulnerability data, and limited customer information. This compounds the recently disclosed CVE-2026-94127, a critical RCE zero-day in BIG-IP's OAuth Authorization Server that is already being", "creation_timestamp": "2026-10-02T05:02:23.703680Z"} https://vulnerability.circl.lu/sighting/df924e64-bca5-46ef-ba5d-19b9e8d72349/export Fri, 02 Oct 2026 05:02:23 +0000 https://vulnerability.circl.lu/sighting/7267ed7a-fd65-4d6d-93b5-3b427f77c2b3/export {"uuid": "7267ed7a-fd65-4d6d-93b5-3b427f77c2b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mws3cupyaj27", "content": "Daily IT Security Digest \u2014 2026-10-01\ncustomer information. This compounds the already critical CVE-2026-94127 zero-day, an RCE flaw in the BIG-IP APM OAuth Authorization Server that is being actively exploited. Systems running versions 21.1.0, 17.5.0\u201317.5.1, and 17.1.0\u201317.1.3 should apply hotfixes", "creation_timestamp": "2026-10-01T05:02:14.772025Z"} {"uuid": "7267ed7a-fd65-4d6d-93b5-3b427f77c2b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mws3cupyaj27", "content": "Daily IT Security Digest \u2014 2026-10-01\ncustomer information. This compounds the already critical CVE-2026-94127 zero-day, an RCE flaw in the BIG-IP APM OAuth Authorization Server that is being actively exploited. Systems running versions 21.1.0, 17.5.0\u201317.5.1, and 17.1.0\u201317.1.3 should apply hotfixes", "creation_timestamp": "2026-10-01T05:02:14.772025Z"} https://vulnerability.circl.lu/sighting/7267ed7a-fd65-4d6d-93b5-3b427f77c2b3/export Thu, 01 Oct 2026 05:02:14 +0000 https://vulnerability.circl.lu/sighting/b562b773-69b9-454f-8aab-079a25392e1e/export {"uuid": "b562b773-69b9-454f-8aab-079a25392e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mwo4h46xo32q", "content": "CVE-2026-94127: F5 BIG-IP APM Zero-Day Triggers Three-Day CISA Deadline", "creation_timestamp": "2026-09-29T15:11:52.125205Z"} {"uuid": "b562b773-69b9-454f-8aab-079a25392e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mwo4h46xo32q", "content": "CVE-2026-94127: F5 BIG-IP APM Zero-Day Triggers Three-Day CISA Deadline", "creation_timestamp": "2026-09-29T15:11:52.125205Z"} https://vulnerability.circl.lu/sighting/b562b773-69b9-454f-8aab-079a25392e1e/export Tue, 29 Sep 2026 15:11:52 +0000 https://vulnerability.circl.lu/sighting/14c9104d-4910-47a6-907f-184b4769495e/export {"uuid": "14c9104d-4910-47a6-907f-184b4769495e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwn2gvuspi2s", "content": "Daily IT Security Digest \u2014 2026-09-29\ncode, internal vulnerability data, and limited customer information. This compounds the existing critical zero-day CVE-2026-94127 (RCE in BIG-IP APM OAuth Authorization Server) which is actively exploited in the wild. Organizations should apply available", "creation_timestamp": "2026-09-29T05:03:17.763388Z"} {"uuid": "14c9104d-4910-47a6-907f-184b4769495e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwn2gvuspi2s", "content": "Daily IT Security Digest \u2014 2026-09-29\ncode, internal vulnerability data, and limited customer information. This compounds the existing critical zero-day CVE-2026-94127 (RCE in BIG-IP APM OAuth Authorization Server) which is actively exploited in the wild. Organizations should apply available", "creation_timestamp": "2026-09-29T05:03:17.763388Z"} https://vulnerability.circl.lu/sighting/14c9104d-4910-47a6-907f-184b4769495e/export Tue, 29 Sep 2026 05:03:17 +0000 https://vulnerability.circl.lu/sighting/86425aba-4b96-4094-b882-220161473aae/export {"uuid": "86425aba-4b96-4094-b882-220161473aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwm4hainmw2l", "content": "~Checkpoint~\nActive exploitation targets critical Check Point, F5 and WordPress flaws.\n-\nIOCs: CVE-2026-85102, CVE-2026-93616, CVE-2026-94127\n-\n#Exploitation #Ransomware #ThreatIntel", "creation_timestamp": "2026-09-28T20:06:36.856721Z"} {"uuid": "86425aba-4b96-4094-b882-220161473aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwm4hainmw2l", "content": "~Checkpoint~\nActive exploitation targets critical Check Point, F5 and WordPress flaws.\n-\nIOCs: CVE-2026-85102, CVE-2026-93616, CVE-2026-94127\n-\n#Exploitation #Ransomware #ThreatIntel", "creation_timestamp": "2026-09-28T20:06:36.856721Z"} https://vulnerability.circl.lu/sighting/86425aba-4b96-4094-b882-220161473aae/export Mon, 28 Sep 2026 20:06:36 +0000 https://vulnerability.circl.lu/sighting/067d3bd7-e15c-4aa4-9eba-df62b73c29fc/export {"uuid": "067d3bd7-e15c-4aa4-9eba-df62b73c29fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwlngisnft2d", "content": "Daily IT Security Digest \u2014 2026-09-28\nZero-Day**\nF5 Networks confirmed a nation-state attack resulting in the theft of parts of its BIG-IP source code and internal vulnerability data. The company is also under attack via CVE-2026-94127, a critical RCE zero-day in BIG-IP's OAuth Authorization Server", "creation_timestamp": "2026-09-28T15:37:45.748708Z"} {"uuid": "067d3bd7-e15c-4aa4-9eba-df62b73c29fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwlngisnft2d", "content": "Daily IT Security Digest \u2014 2026-09-28\nZero-Day**\nF5 Networks confirmed a nation-state attack resulting in the theft of parts of its BIG-IP source code and internal vulnerability data. The company is also under attack via CVE-2026-94127, a critical RCE zero-day in BIG-IP's OAuth Authorization Server", "creation_timestamp": "2026-09-28T15:37:45.748708Z"} https://vulnerability.circl.lu/sighting/067d3bd7-e15c-4aa4-9eba-df62b73c29fc/export Mon, 28 Sep 2026 15:37:45 +0000 https://vulnerability.circl.lu/sighting/df279f74-791a-44ba-a4cf-363dbdbad682/export {"uuid": "df279f74-791a-44ba-a4cf-363dbdbad682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/jpjj.jp/post/3mwkdkzklyi2c", "content": "F5\u306e\u901a\u4fe1\u5236\u5fa1\u6a5f\u5668\u306b\u8a8d\u8a3c\u306a\u3057\u3067\u9060\u9694\u64cd\u4f5c\u3055\u308c\u308b\u6b20\u9665\u3000\u3059\u3067\u306b\u60aa\u7528\u3000JPCERT/CC\u300c\u56fd\u5185\u3067\u5e83\u304f\u5229\u7528\u300d\u3000\u6df1\u523b\u5ea6\u306f10\u70b9\u6e80\u70b9\u306e9.8\n\nJPCERT/CC\u306f9\u670824\u65e5\u3001\u7c73F5\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u6a5f\u5668\u300cBIG-IP APM\u300d\u306b\u3001\u8a8d\u8a3c\u3092\u53d7\u3051\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u9060\u9694\u304b\u3089\u4efb\u610f\u306e\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3067\u304d\u308b\u6b20\u9665\uff08CVE-2026-94127\uff09\u304c\u3042\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u51fa\u3057\u305f\u3002\n\n#\u65e5\u672c\u6642\u4e8b\u65b0\u805e #\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-09-28T03:08:41.900989Z"} {"uuid": "df279f74-791a-44ba-a4cf-363dbdbad682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/jpjj.jp/post/3mwkdkzklyi2c", "content": "F5\u306e\u901a\u4fe1\u5236\u5fa1\u6a5f\u5668\u306b\u8a8d\u8a3c\u306a\u3057\u3067\u9060\u9694\u64cd\u4f5c\u3055\u308c\u308b\u6b20\u9665\u3000\u3059\u3067\u306b\u60aa\u7528\u3000JPCERT/CC\u300c\u56fd\u5185\u3067\u5e83\u304f\u5229\u7528\u300d\u3000\u6df1\u523b\u5ea6\u306f10\u70b9\u6e80\u70b9\u306e9.8\n\nJPCERT/CC\u306f9\u670824\u65e5\u3001\u7c73F5\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u6a5f\u5668\u300cBIG-IP APM\u300d\u306b\u3001\u8a8d\u8a3c\u3092\u53d7\u3051\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u9060\u9694\u304b\u3089\u4efb\u610f\u306e\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3067\u304d\u308b\u6b20\u9665\uff08CVE-2026-94127\uff09\u304c\u3042\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u51fa\u3057\u305f\u3002\n\n#\u65e5\u672c\u6642\u4e8b\u65b0\u805e #\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-09-28T03:08:41.900989Z"} https://vulnerability.circl.lu/sighting/df279f74-791a-44ba-a4cf-363dbdbad682/export Mon, 28 Sep 2026 03:08:41 +0000