F5 has patched an actively exploited critical zero-day vulnerability (CVE-2026-94127) in the BIG-IP Access Policy Manager. The flaw allows unauthenticated remote code execution on systems configured as OAuth authorization servers. Administrators are strongly advised to apply the provided hotfixes immediately to prevent system compromise.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →