News stories · 30d
5
Advisories · 30d
0
Added to KEV · 90d
1
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-09-22 | CVE-2026-94127 | BIG-IP APM | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | |
| 2026-03-27 | CVE-2025-53521 | BIG-IP | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | |
| 2023-10-31 | CVE-2023-46748 | BIG-IP Configuration Utility | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | |
| 2023-10-31 | CVE-2023-46747 | BIG-IP Configuration Utility | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | Known |
| 2022-05-10 | CVE-2022-1388 | BIG-IP | F5 BIG-IP Missing Authentication Vulnerability | Known |
| 2022-01-18 | CVE-2021-22991 | BIG-IP Traffic Management Microkernel | F5 BIG-IP Traffic Management Microkernel Buffer Overflow | |
| 2021-11-03 | CVE-2020-5902 | BIG-IP | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | Known |
| 2021-11-03 | CVE-2021-22986 | BIG-IP and BIG-IQ Centralized Management | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | Known |
CVEs in the news
Timeline (last 30 days)
- F5 addressed critical RCE flaws in NGINX — Security Affairs, 2026-10-16
- F5, Juniper Networks Patch Critical Vulnerabilities — SecurityWeek, 2026-10-16
- FBI Hack Fallout, EvilTokens Takedown, and the F5 Zero Day — Decipher, 2026-09-29
- Someone's attacking a critical 0-day RCE in F5 BIG-IP APM — The Register, 2026-09-23
- CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM — Rapid7 +2 sources, 2026-09-23