Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Product

BIG-IP

Made by F5. 3 of its vulnerabilities are known to have been exploited.

Coverage

CriticalAct nowExploitedCISA KEV

F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (CVE-2026-94127) is being actively exploited, CISA warns

CISA added CVE-2026-94127 (F5 BIG-IP APM) to its Known Exploited Vulnerabilities catalog on September 22, 2026, which means there is reliable evidence of exploitation in the wild. F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution.

Why it matters

CISA lists this as exploited in the wild. Unpatched BIG-IP and BIG-IP APM systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited VulnerabilitiesEnterprise
CriticalAct nowExploitedCISA KEV

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing…

Why it matters

CISA lists this as exploited in the wild. Unpatched BIG-IP and Multiple Products systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Cybersecurity Advisories · 4 sources
EnterpriseSecurity pros

Actively exploited

CVE-2025-53521CVSS 9.3

F5 BIG-IP

F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

Added Mar 27, 2026Fed. due Mar 30, 2026
CVE-2022-1388RansomwareCVSS 9.8

F5 BIG-IP

F5 BIG-IP Missing Authentication Vulnerability

Added May 10, 2022Fed. due May 31, 2022
CVE-2020-5902RansomwareCVSS 9.8

F5 BIG-IP

F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022