F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

概要

参考情報

• my.f5.com/manage/s/article/K000162605 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-94127

big-ip access policy manager のその他の脆弱性

• CVE-2026-63020低 3.1A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages  Impact: …
• CVE-2026-42937中 6.5Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl RE…
• CVE-2026-42930高 8.7When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restriction…
• CVE-2026-42924高 8.7An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP …
• CVE-2026-42920高 7.5When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic …