CyberzSOC

CERT-EU recommends taking appropriate actions as soon as possible. The vulnerability CVE-2026-94127, with a CVSS score of 9.8, is a heap-based buffer overflow vulnerability and allow unauthenticated attacker to achieve remote code execution (RCE) The vulnerability affects the following versions of BIG-IP APM if configured with an access policy and an OAuth profile on a virtual server [1]: CERT-EU recommends taking the following actions as soon as possible: 1. Check for signs of compromise (see the compromise assessment section). If any sign of compromise is detected, start the incident response process. If patching cannot be applied immediately, F5 provides an iRule-based mitigation for the affected virtual server.