{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:30.693Z","products":["f5"],"actNowTotal":1,"results":[{"query":"f5","matched":1,"actNow":1,"events":[{"id":"kev-2026-09-22-f5-big-ip-apm","url":"https://securitythreatpulse.com/events/kev-2026-09-22-f5-big-ip-apm","title":"F5 BIG-IP APM: attackers can run their own code","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 49 days old, so many systems are likely still unpatched. It affects a product that faces the internet or gives remote access. The severity score is critical (9.3).","tier":"now","rankScore":5,"rankWhy":["Exploitation is confirmed by an authoritative source.","The product faces the internet or gives remote access."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-94127"],"vendor":"F5","product":"BIG-IP APM","affectedProducts":[{"kind":"direct","slug":"f5/bigipapm","vendor":"F5","product":"BIG-IP APM","evidence":["kev"],"vendorKey":"f5","productKey":"bigipapm"},{"kind":"direct","slug":"f5/bigip","vendor":"F5","product":"BIG-IP","evidence":["cpe"],"vendorKey":"f5","productKey":"bigip"}],"category":{"id":"edge","label":"VPN, firewall or gateway","why":"It sits at the edge of your network and faces the internet, so attackers can reach it directly.","doThis":"If you have it, patch it today. If you cannot, block access to it from the internet until you can."},"summary":"F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution.","cvss":9.3,"epss":0.2655,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-09-22","kevDueDate":"2026-09-25","firstSeenAt":"2026-09-22T00:00:00.000Z","updatedAt":"2026-11-10T14:30:20.320Z","newestEvidenceAt":"2026-09-24T16:48:59.969Z"}]}]}