F5 security advisory (AV26-949)
Canada's Cyber Centre warns F5 BIG-IP APM flaw CVE-2026-94127 is being exploited in the wild.
The Canadian Centre for Cyber Security issued advisory AV26-949 on September 22, 2026, for an F5 BIG-IP APM vulnerability. CVE-2026-94127 affects BIG-IP 21.1.0 through hotfix 21.1.0.2.0.30.22, 17.5.0 through hotfix 17.5.1.9.0.160.12, and 17.1.0 through hotfix 17.1.3.5.0.41.14. F5 reported the flaw is being exploited in the wild. Administrators are urged to review F5 article K000162605 and apply updates.
- CVE-2026-94127 in BIG-IP APM is exploited in the wild.
- Affected branches include BIG-IP 21.1, 17.5, and 17.1.
- Canadian Cyber Centre advisory AV26-949 urges administrators to patch.
- CVEs
- CVE-2026-94127
- Vendors
- F5
- Products
- BIG-IPBIG-IP APM
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-94127 | Unauthenticated Heap-Overflow RCE in F5 BIG-IP APM with OAuth Profile | 9.3 | 27% | KEVPoC ×2 | KEV |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-949 Date: September 22, 2026 As of September 22, 2026, F5 is affected by a vulnerability in the following product: BIG-IP Versions 21. 1. 0 to Hotfix-BIGIP-21.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.