CVE-2026-94127 — F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security…
Tag: F5
CVE-2020-5902: F5 BIG-IP Vulnerability
An N-day vulnerability in F5 BIG-IP exploited by QTFY.
Critical NGINX Heap Buffer Overflow CVE-2026-42533 Allows DoS and Potential RCE
F5 has patched a critical heap buffer overflow vulnerability in NGINX, tracked as CVE-2026-42533, which can crash worker processes and may allow…
StrikeShark Campaign Uses Novel SharkLoader Malware to Deploy Cobalt Strike Beacon
A newly identified cyber attack campaign, tracked as StrikeShark by Kaspersky, is deploying a previously undocumented malware family called SharkLoader to deliver…
China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH for Nearly a Decade
Sygnia, tracking the China-nexus group as Velvet Ant, discovered that the group backdoored Linux PAM and OpenSSH components to maintain persistent access…
NGINX Plus Affected by Critical Vulnerability
NGINX Plus versions prior to 37.0.3.1 are vulnerable to CVE-2026-42533. Fixed in 37.0.3.1.
NGINX Gateway Fabric Listed as Affected by CVE-2026-42533
F5 advisory lists NGINX Gateway Fabric as affected by CVE-2026-42533, though fixed builds were not yet published at the time of the…
NGINX Instance Manager Listed as Affected by CVE-2026-42533
F5 advisory lists NGINX Instance Manager as affected by CVE-2026-42533, though fixed builds were not yet published at the time of the…
NGINX Ingress Controller Listed as Affected by CVE-2026-42533
F5 advisory lists NGINX Ingress Controller as affected by CVE-2026-42533, though fixed builds were not yet published at the time of the…
NGINX App Protect WAF Listed as Affected by CVE-2026-42533
F5 advisory lists NGINX App Protect WAF as affected by CVE-2026-42533, though fixed builds were not yet published at the time of…