F5

F5 BIG-IP APM: Exploited OAuth RCE Hits Specific Configurations

CVE-2026-94127 enables unauthenticated RCE in APM systems with an access policy and OAuth authorisation-server profile.