EudorIACyber Intelligence
Operational monitoring Newsletter IT EN
← Back to intelligence
Technical advisory

F5 security advisory (AV26-949) - Update 1

Official source
EudorIA operational summary

What it means

Priority 95/100

F5 ha rilevato una vulnerabilità in BIG-IP, con sfruttamento attivo in rete. Le versioni interessate vanno da 17.1.0 a 21.1.0. Il Cyber Centre invita a verificare i link forniti e applicare le patch disponibili.

Why it matters

La vulnerabilità CVE-2026-94127 potrebbe consentire attacchi non autorizzati, mettendo a rischio la sicurezza e la continuità operativa delle PMI che utilizzano BIG-IP. L'exploit in atto aumenta la criticità del rischio.

Recommended actions

  1. Applicare le patch disponibili per BIG-IP
  2. Disattivare o limitare l'accesso a dispositivi non necessari
  3. Implementare controlli di accesso basati su MFA
  4. Monitorare attivamente i log di accesso e le configurazioni
  5. Eseguire backup regolari e verificare la loro integrità

Potential operational benefits

  • Riduzione della superficie esposta
  • Maggiore visibilità sugli accessi non autorizzati
  • Minore impatto in caso di attacco
  • Migliore preparazione alle minacce emergenti
Indications to confirm against the customer's technical and organisational perimeter.
Relevant controlsPatch managementSegmentazione di reteMFA / IdentitàMonitoraggio / SIEMBackup & DR
AudienceITSOCCISO
Information centre

Translation in progress

Canadian Centre for Cyber Security

The official content is available in the original language. The Italian version will be published once automated checks are complete.

Text acquired from the source

Serial number: AV26-949 Date: September 22, 2026 As of September 22, 2026, F5 is affected by a vulnerability in the following product: BIG-IP APM Versions 21.1.0 prior to Hotfix-BIGIP-21.1.0.2.0.30.22-ENG Versions 17.5.0 prior to Hotfix-BIGIP-17.5.1.9.0.160.12-ENG Versions 17.1.0 prior to Hotfix-BIGIP-17.1.3.5.0.41.14-ENG F5 has reported that CVE-2026-94127 is being exploited in the wild. Update 1 On September 22, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-94127 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. K000162605: BIG-IP APM vulnerability CVE-2026-94127 2026 security notifications CISA KEV: CVE-2026-94127

Source
Canadian Centre for Cyber Security (Canada)
Publishing entity
Canadian Centre for Cyber Security
Entity type
National CSIRT
Area
North America · CA
Original language
en · translation in preparation
Publication
22/09/2026 22:10
MITRE ATT&CK
T1562, T1562.001
CVE
CVE-2026-94127
Stated country
CA
Technical scope

Affected products and versions

Verification in progress
Information not yet acquired.

The collector will check NVD and the available official vendor advisories.

Open the original source