F5在OAuth服务器上针对未经身份验证的RCE利用关键BIG-IP APM零日漏洞修补程序

F5表示，攻击者正在利用F5 BIG-IP访问策略管理器(APM)中的一个严重漏洞，该漏洞允许他们在不登录的情况下在BIG-IP系统上运行代码。CVE-2026-94127漏洞仅影响系统

原文标题：F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

信源：The Hacker News ｜ 阅读原文

Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127, affects only systems in which APM serves as an OAuth authorization server, issui

—— 开源情报自动采集 · 网