<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-23T06:57:24.464822+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4662e55a-82f2-4849-a54f-b5c7f9f20f98/export</id>
    <title>4662e55a-82f2-4849-a54f-b5c7f9f20f98</title>
    <updated>2026-09-23T06:57:24.490874+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4662e55a-82f2-4849-a54f-b5c7f9f20f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mw64jmd4zl2x", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-94127: \u26a0\ufe0f CVE-2026-94127: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-94127-when-a-big-ip-apm-access-policy", "creation_timestamp": "2026-09-23T06:30:39.853250Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4662e55a-82f2-4849-a54f-b5c7f9f20f98/export"/>
    <published>2026-09-23T06:30:39.853250+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6ef3a239-d040-4ab4-9545-a30b603794ee/export</id>
    <title>6ef3a239-d040-4ab4-9545-a30b603794ee</title>
    <updated>2026-09-23T06:57:24.492622+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6ef3a239-d040-4ab4-9545-a30b603794ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mw5xliytoj2d", "content": "Daily IT Security Digest \u2014 2026-09-23\nconcerning because attackers now possess proprietary code that could reveal previously unknown vulnerabilities (0-days) in widely deployed F5 appliances. CVE-2026-94127 (RCE) and CVE-2026-93616 (Check Point RCE) are among the newly exposed concerns.", "creation_timestamp": "2026-09-23T05:02:14.474200Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6ef3a239-d040-4ab4-9545-a30b603794ee/export"/>
    <published>2026-09-23T05:02:14.474200+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e28cf65a-a056-4beb-9b4c-07d1152d50d4/export</id>
    <title>e28cf65a-a056-4beb-9b4c-07d1152d50d4</title>
    <updated>2026-09-23T06:57:24.492732+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "e28cf65a-a056-4beb-9b4c-07d1152d50d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/f5-big-ip-remote-code-execution-vulnerability_20260923", "content": "", "creation_timestamp": "2026-09-23T04:48:28.572197Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e28cf65a-a056-4beb-9b4c-07d1152d50d4/export"/>
    <published>2026-09-23T04:48:28.572197+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/06987729-8c70-457c-872f-cfe749649d3f/export</id>
    <title>06987729-8c70-457c-872f-cfe749649d3f</title>
    <updated>2026-09-23T06:57:24.493735+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "06987729-8c70-457c-872f-cfe749649d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw5uc2gdc22c", "content": "~Certeu~\nActively exploited unauthenticated RCE affects BIG-IP APM; patch urgently.\n-\nIOCs: CVE-2026-94127\n-\n#CVE202694127 #F5 #ThreatIntel", "creation_timestamp": "2026-09-23T04:03:16.780522Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/06987729-8c70-457c-872f-cfe749649d3f/export"/>
    <published>2026-09-23T04:03:16.780522+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0203d3b3-e404-4dbb-9d74-5b86cf61c98f/export</id>
    <title>0203d3b3-e404-4dbb-9d74-5b86cf61c98f</title>
    <updated>2026-09-23T06:57:24.493830+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0203d3b3-e404-4dbb-9d74-5b86cf61c98f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://www.acn.gov.it/portale/w/f5-big-ip-rilevato-sfruttamento-in-rete-della-cve-2026-94127", "content": "Rilevato lo sfruttamento in rete di una vulnerabilit\u00e0, identificata tramite la CVE-2026-94127, presente in BIG-IP APM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire a utenti malintenzionati remoti di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-09-23T01:00:44.451949Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0203d3b3-e404-4dbb-9d74-5b86cf61c98f/export"/>
    <published>2026-09-23T01:00:44.451949+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6ad342bf-e405-452e-a9d0-42c962aac599/export</id>
    <title>6ad342bf-e405-452e-a9d0-42c962aac599</title>
    <updated>2026-09-23T06:57:24.493924+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6ad342bf-e405-452e-a9d0-42c962aac599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mw5ddlqbs32c", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-94127", "creation_timestamp": "2026-09-22T22:59:54.507060Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6ad342bf-e405-452e-a9d0-42c962aac599/export"/>
    <published>2026-09-22T22:59:54.507060+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9dabcb2e-bccf-4b4f-acca-641c4616d388/export</id>
    <title>9dabcb2e-bccf-4b4f-acca-641c4616d388</title>
    <updated>2026-09-23T06:57:24.493996+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9dabcb2e-bccf-4b4f-acca-641c4616d388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mw55z2eriz2v", "content": "K000162605: BIG-IP APM vulnerability CVE-2026-94127", "creation_timestamp": "2026-09-22T21:24:31.669335Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9dabcb2e-bccf-4b4f-acca-641c4616d388/export"/>
    <published>2026-09-22T21:24:31.669335+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e48c809d-fcef-4daa-b73c-5ecdefce2728/export</id>
    <title>e48c809d-fcef-4daa-b73c-5ecdefce2728</title>
    <updated>2026-09-23T06:57:24.494070+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e48c809d-fcef-4daa-b73c-5ecdefce2728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94127", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117316666030287896", "content": "When it rains, it pours. F5 BIG-IP APM also has an exploited CVE!\nhttps://ifin.network/t/f5-big-ip-cve-2026-94127-rce-exploited/855\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-09-22T20:51:56.250402Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e48c809d-fcef-4daa-b73c-5ecdefce2728/export"/>
    <published>2026-09-22T20:51:56.250402+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/711a37ca-cb19-4659-887c-bb62d98f2416/export</id>
    <title>711a37ca-cb19-4659-887c-bb62d98f2416</title>
    <updated>2026-09-23T06:57:24.494145+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "711a37ca-cb19-4659-887c-bb62d98f2416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mw52zat6a522", "content": "CVE-2026-94127 now in CISA KEV.\nActively exploited F5 BIG-IP APM zero-day.\n\u2022 Heap-based buffer overflow\n\u2022 CVSS v4 9.3\n\nhttps://thecircuitry.to/article/cisa-adds-actively-exploited-f5-big-ip-apm-flaw-to-kev-catalog-mud3ryl7", "creation_timestamp": "2026-09-22T20:30:57.797508Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/711a37ca-cb19-4659-887c-bb62d98f2416/export"/>
    <published>2026-09-22T20:30:57.797508+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bebe691d-a271-4595-a024-ef157e182b09/export</id>
    <title>bebe691d-a271-4595-a024-ef157e182b09</title>
    <updated>2026-09-23T06:57:24.494221+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "bebe691d-a271-4595-a024-ef157e182b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-022-vulnerability-impacting-f5-big-ip-access-policy-manager-apm-cve-2026-94127", "content": "", "creation_timestamp": "2026-09-22T20:15:06.583173Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bebe691d-a271-4595-a024-ef157e182b09/export"/>
    <published>2026-09-22T20:15:06.583173+00:00</published>
  </entry>
</feed>
