BIG-IP Access Policy Manager (Product): news timeline & CVEs

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

CISA added exploited FortiMail flaw CVE-2026-104286, a critical unauthenticated file-write bug, to the KEV catalog.

CISA added Fortinet FortiMail CVE-2026-104286, a CVSS 9.8 path-traversal and NULL-byte flaw, to the Known Exploited Vulnerabilities catalog after confirmed active exploitation. An unauthenticated attacker can write arbitrary files via crafted HTTP or HTTPS requests. Affected branches are FortiMail 8.0.0-8.0.1, 7.6.0-7.6.6, 7.4.0-7.4.8, and 7.2.0-7.2.9, with some fixes still upcoming. Until patches ship, Fortinet advises disabling IBE and restricting management access; federal agencies must mitigate by October 4, 2026.

The Hacker NewsOct 2, 05:49 UTC · 18h agoExploit / PoC in the wildCVE-2026-104286 CVE-2026-85102 CVE-2026-93616+5 CVEs2

CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation

F5 shipped emergency fixes for CVE-2026-94127, a critical BIG-IP APM flaw under active exploitation.

F5 released emergency engineering hotfixes for CVE-2026-94127, a critical heap-based buffer overflow in BIG-IP Access Policy Manager. The report describes the issue as a remote code execution flaw and says it is under active exploitation. The available text does not list affected versions, indicators, or the attackers involved.

SOCRadarSep 24, 11:14 UTC · 8d agoExploit / PoC in the wildCVE-2026-94127

BIG-IP Access Policy Manager

Timeline2 articles

Related CVEsby mentions

Appears with

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation