<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 23 Sep 2026 06:57:24 +0000</lastBuildDate>
    <item>
      <title>4662e55a-82f2-4849-a54f-b5c7f9f20f98</title>
      <link>https://vulnerability.circl.lu/sighting/4662e55a-82f2-4849-a54f-b5c7f9f20f98/export</link>
      <description>{"uuid": "4662e55a-82f2-4849-a54f-b5c7f9f20f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mw64jmd4zl2x", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-94127: \u26a0\ufe0f CVE-2026-94127: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-94127-when-a-big-ip-apm-access-policy", "creation_timestamp": "2026-09-23T06:30:39.853250Z"}</description>
      <content:encoded>{"uuid": "4662e55a-82f2-4849-a54f-b5c7f9f20f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mw64jmd4zl2x", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-94127: \u26a0\ufe0f CVE-2026-94127: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-94127-when-a-big-ip-apm-access-policy", "creation_timestamp": "2026-09-23T06:30:39.853250Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4662e55a-82f2-4849-a54f-b5c7f9f20f98/export</guid>
      <pubDate>Wed, 23 Sep 2026 06:30:39 +0000</pubDate>
    </item>
    <item>
      <title>6ef3a239-d040-4ab4-9545-a30b603794ee</title>
      <link>https://vulnerability.circl.lu/sighting/6ef3a239-d040-4ab4-9545-a30b603794ee/export</link>
      <description>{"uuid": "6ef3a239-d040-4ab4-9545-a30b603794ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mw5xliytoj2d", "content": "Daily IT Security Digest \u2014 2026-09-23\nconcerning because attackers now possess proprietary code that could reveal previously unknown vulnerabilities (0-days) in widely deployed F5 appliances. CVE-2026-94127 (RCE) and CVE-2026-93616 (Check Point RCE) are among the newly exposed concerns.", "creation_timestamp": "2026-09-23T05:02:14.474200Z"}</description>
      <content:encoded>{"uuid": "6ef3a239-d040-4ab4-9545-a30b603794ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mw5xliytoj2d", "content": "Daily IT Security Digest \u2014 2026-09-23\nconcerning because attackers now possess proprietary code that could reveal previously unknown vulnerabilities (0-days) in widely deployed F5 appliances. CVE-2026-94127 (RCE) and CVE-2026-93616 (Check Point RCE) are among the newly exposed concerns.", "creation_timestamp": "2026-09-23T05:02:14.474200Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6ef3a239-d040-4ab4-9545-a30b603794ee/export</guid>
      <pubDate>Wed, 23 Sep 2026 05:02:14 +0000</pubDate>
    </item>
    <item>
      <title>e28cf65a-a056-4beb-9b4c-07d1152d50d4</title>
      <link>https://vulnerability.circl.lu/sighting/e28cf65a-a056-4beb-9b4c-07d1152d50d4/export</link>
      <description>{"uuid": "e28cf65a-a056-4beb-9b4c-07d1152d50d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/f5-big-ip-remote-code-execution-vulnerability_20260923", "content": "", "creation_timestamp": "2026-09-23T04:48:28.572197Z"}</description>
      <content:encoded>{"uuid": "e28cf65a-a056-4beb-9b4c-07d1152d50d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/f5-big-ip-remote-code-execution-vulnerability_20260923", "content": "", "creation_timestamp": "2026-09-23T04:48:28.572197Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e28cf65a-a056-4beb-9b4c-07d1152d50d4/export</guid>
      <pubDate>Wed, 23 Sep 2026 04:48:28 +0000</pubDate>
    </item>
    <item>
      <title>06987729-8c70-457c-872f-cfe749649d3f</title>
      <link>https://vulnerability.circl.lu/sighting/06987729-8c70-457c-872f-cfe749649d3f/export</link>
      <description>{"uuid": "06987729-8c70-457c-872f-cfe749649d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw5uc2gdc22c", "content": "~Certeu~\nActively exploited unauthenticated RCE affects BIG-IP APM; patch urgently.\n-\nIOCs: CVE-2026-94127\n-\n#CVE202694127 #F5 #ThreatIntel", "creation_timestamp": "2026-09-23T04:03:16.780522Z"}</description>
      <content:encoded>{"uuid": "06987729-8c70-457c-872f-cfe749649d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw5uc2gdc22c", "content": "~Certeu~\nActively exploited unauthenticated RCE affects BIG-IP APM; patch urgently.\n-\nIOCs: CVE-2026-94127\n-\n#CVE202694127 #F5 #ThreatIntel", "creation_timestamp": "2026-09-23T04:03:16.780522Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/06987729-8c70-457c-872f-cfe749649d3f/export</guid>
      <pubDate>Wed, 23 Sep 2026 04:03:16 +0000</pubDate>
    </item>
    <item>
      <title>0203d3b3-e404-4dbb-9d74-5b86cf61c98f</title>
      <link>https://vulnerability.circl.lu/sighting/0203d3b3-e404-4dbb-9d74-5b86cf61c98f/export</link>
      <description>{"uuid": "0203d3b3-e404-4dbb-9d74-5b86cf61c98f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://www.acn.gov.it/portale/w/f5-big-ip-rilevato-sfruttamento-in-rete-della-cve-2026-94127", "content": "Rilevato lo sfruttamento in rete di una vulnerabilit\u00e0, identificata tramite la CVE-2026-94127, presente in BIG-IP APM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire a utenti malintenzionati remoti di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-09-23T01:00:44.451949Z"}</description>
      <content:encoded>{"uuid": "0203d3b3-e404-4dbb-9d74-5b86cf61c98f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://www.acn.gov.it/portale/w/f5-big-ip-rilevato-sfruttamento-in-rete-della-cve-2026-94127", "content": "Rilevato lo sfruttamento in rete di una vulnerabilit\u00e0, identificata tramite la CVE-2026-94127, presente in BIG-IP APM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire a utenti malintenzionati remoti di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-09-23T01:00:44.451949Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0203d3b3-e404-4dbb-9d74-5b86cf61c98f/export</guid>
      <pubDate>Wed, 23 Sep 2026 01:00:44 +0000</pubDate>
    </item>
    <item>
      <title>6ad342bf-e405-452e-a9d0-42c962aac599</title>
      <link>https://vulnerability.circl.lu/sighting/6ad342bf-e405-452e-a9d0-42c962aac599/export</link>
      <description>{"uuid": "6ad342bf-e405-452e-a9d0-42c962aac599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mw5ddlqbs32c", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-94127", "creation_timestamp": "2026-09-22T22:59:54.507060Z"}</description>
      <content:encoded>{"uuid": "6ad342bf-e405-452e-a9d0-42c962aac599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mw5ddlqbs32c", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-94127", "creation_timestamp": "2026-09-22T22:59:54.507060Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6ad342bf-e405-452e-a9d0-42c962aac599/export</guid>
      <pubDate>Tue, 22 Sep 2026 22:59:54 +0000</pubDate>
    </item>
    <item>
      <title>9dabcb2e-bccf-4b4f-acca-641c4616d388</title>
      <link>https://vulnerability.circl.lu/sighting/9dabcb2e-bccf-4b4f-acca-641c4616d388/export</link>
      <description>{"uuid": "9dabcb2e-bccf-4b4f-acca-641c4616d388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mw55z2eriz2v", "content": "K000162605: BIG-IP APM vulnerability CVE-2026-94127", "creation_timestamp": "2026-09-22T21:24:31.669335Z"}</description>
      <content:encoded>{"uuid": "9dabcb2e-bccf-4b4f-acca-641c4616d388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mw55z2eriz2v", "content": "K000162605: BIG-IP APM vulnerability CVE-2026-94127", "creation_timestamp": "2026-09-22T21:24:31.669335Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9dabcb2e-bccf-4b4f-acca-641c4616d388/export</guid>
      <pubDate>Tue, 22 Sep 2026 21:24:31 +0000</pubDate>
    </item>
    <item>
      <title>e48c809d-fcef-4daa-b73c-5ecdefce2728</title>
      <link>https://vulnerability.circl.lu/sighting/e48c809d-fcef-4daa-b73c-5ecdefce2728/export</link>
      <description>{"uuid": "e48c809d-fcef-4daa-b73c-5ecdefce2728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94127", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117316666030287896", "content": "When it rains, it pours. F5 BIG-IP APM also has an exploited CVE!\nhttps://ifin.network/t/f5-big-ip-cve-2026-94127-rce-exploited/855\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-09-22T20:51:56.250402Z"}</description>
      <content:encoded>{"uuid": "e48c809d-fcef-4daa-b73c-5ecdefce2728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94127", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117316666030287896", "content": "When it rains, it pours. F5 BIG-IP APM also has an exploited CVE!\nhttps://ifin.network/t/f5-big-ip-cve-2026-94127-rce-exploited/855\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-09-22T20:51:56.250402Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e48c809d-fcef-4daa-b73c-5ecdefce2728/export</guid>
      <pubDate>Tue, 22 Sep 2026 20:51:56 +0000</pubDate>
    </item>
    <item>
      <title>711a37ca-cb19-4659-887c-bb62d98f2416</title>
      <link>https://vulnerability.circl.lu/sighting/711a37ca-cb19-4659-887c-bb62d98f2416/export</link>
      <description>{"uuid": "711a37ca-cb19-4659-887c-bb62d98f2416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mw52zat6a522", "content": "CVE-2026-94127 now in CISA KEV.\nActively exploited F5 BIG-IP APM zero-day.\n\u2022 Heap-based buffer overflow\n\u2022 CVSS v4 9.3\n\nhttps://thecircuitry.to/article/cisa-adds-actively-exploited-f5-big-ip-apm-flaw-to-kev-catalog-mud3ryl7", "creation_timestamp": "2026-09-22T20:30:57.797508Z"}</description>
      <content:encoded>{"uuid": "711a37ca-cb19-4659-887c-bb62d98f2416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mw52zat6a522", "content": "CVE-2026-94127 now in CISA KEV.\nActively exploited F5 BIG-IP APM zero-day.\n\u2022 Heap-based buffer overflow\n\u2022 CVSS v4 9.3\n\nhttps://thecircuitry.to/article/cisa-adds-actively-exploited-f5-big-ip-apm-flaw-to-kev-catalog-mud3ryl7", "creation_timestamp": "2026-09-22T20:30:57.797508Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/711a37ca-cb19-4659-887c-bb62d98f2416/export</guid>
      <pubDate>Tue, 22 Sep 2026 20:30:57 +0000</pubDate>
    </item>
    <item>
      <title>bebe691d-a271-4595-a024-ef157e182b09</title>
      <link>https://vulnerability.circl.lu/sighting/bebe691d-a271-4595-a024-ef157e182b09/export</link>
      <description>{"uuid": "bebe691d-a271-4595-a024-ef157e182b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-022-vulnerability-impacting-f5-big-ip-access-policy-manager-apm-cve-2026-94127", "content": "", "creation_timestamp": "2026-09-22T20:15:06.583173Z"}</description>
      <content:encoded>{"uuid": "bebe691d-a271-4595-a024-ef157e182b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-022-vulnerability-impacting-f5-big-ip-access-policy-manager-apm-cve-2026-94127", "content": "", "creation_timestamp": "2026-09-22T20:15:06.583173Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bebe691d-a271-4595-a024-ef157e182b09/export</guid>
      <pubDate>Tue, 22 Sep 2026 20:15:06 +0000</pubDate>
    </item>
  </channel>
</rss>
