NCSC-VD-2609-004-03
Severity Level: Critical
Reference No.: NCSC-VD-2609-004-03
F5
Description
CVE-2026-94127: A vulnerability in BIG-IP APM could allow an unauthenticated remote attacker to execute arbitrary code when the system is configured as an OAuth Authorization Server. with an APM access policy and an OAuth profile configured on the same virtual server.
Vulnerabilities
- CVE-2026-94127
A vulnerability in BIG-IP APM could allow an unauthenticated remote attacker to execute arbitrary code when the system is configured as an OAuth Authorization Server. with an APM access policy and an OAuth profile configured on the same virtual server.