<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-29T19:12:53.012691+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b562b773-69b9-454f-8aab-079a25392e1e/export</id>
    <title>b562b773-69b9-454f-8aab-079a25392e1e</title>
    <updated>2026-09-29T19:12:53.042259+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b562b773-69b9-454f-8aab-079a25392e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mwo4h46xo32q", "content": "CVE-2026-94127: F5 BIG-IP APM Zero-Day Triggers Three-Day CISA Deadline", "creation_timestamp": "2026-09-29T15:11:52.125205Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b562b773-69b9-454f-8aab-079a25392e1e/export"/>
    <published>2026-09-29T15:11:52.125205+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/14c9104d-4910-47a6-907f-184b4769495e/export</id>
    <title>14c9104d-4910-47a6-907f-184b4769495e</title>
    <updated>2026-09-29T19:12:53.044113+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "14c9104d-4910-47a6-907f-184b4769495e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwn2gvuspi2s", "content": "Daily IT Security Digest \u2014 2026-09-29\ncode, internal vulnerability data, and limited customer information. This compounds the existing critical zero-day CVE-2026-94127 (RCE in BIG-IP APM OAuth Authorization Server) which is actively exploited in the wild. Organizations should apply available", "creation_timestamp": "2026-09-29T05:03:17.763388Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/14c9104d-4910-47a6-907f-184b4769495e/export"/>
    <published>2026-09-29T05:03:17.763388+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/86425aba-4b96-4094-b882-220161473aae/export</id>
    <title>86425aba-4b96-4094-b882-220161473aae</title>
    <updated>2026-09-29T19:12:53.044252+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "86425aba-4b96-4094-b882-220161473aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwm4hainmw2l", "content": "~Checkpoint~\nActive exploitation targets critical Check Point, F5 and WordPress flaws.\n-\nIOCs: CVE-2026-85102, CVE-2026-93616, CVE-2026-94127\n-\n#Exploitation #Ransomware #ThreatIntel", "creation_timestamp": "2026-09-28T20:06:36.856721Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/86425aba-4b96-4094-b882-220161473aae/export"/>
    <published>2026-09-28T20:06:36.856721+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/067d3bd7-e15c-4aa4-9eba-df62b73c29fc/export</id>
    <title>067d3bd7-e15c-4aa4-9eba-df62b73c29fc</title>
    <updated>2026-09-29T19:12:53.044386+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "067d3bd7-e15c-4aa4-9eba-df62b73c29fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwlngisnft2d", "content": "Daily IT Security Digest \u2014 2026-09-28\nZero-Day**\nF5 Networks confirmed a nation-state attack resulting in the theft of parts of its BIG-IP source code and internal vulnerability data. The company is also under attack via CVE-2026-94127, a critical RCE zero-day in BIG-IP's OAuth Authorization Server", "creation_timestamp": "2026-09-28T15:37:45.748708Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/067d3bd7-e15c-4aa4-9eba-df62b73c29fc/export"/>
    <published>2026-09-28T15:37:45.748708+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/df279f74-791a-44ba-a4cf-363dbdbad682/export</id>
    <title>df279f74-791a-44ba-a4cf-363dbdbad682</title>
    <updated>2026-09-29T19:12:53.044491+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "df279f74-791a-44ba-a4cf-363dbdbad682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/jpjj.jp/post/3mwkdkzklyi2c", "content": "F5\u306e\u901a\u4fe1\u5236\u5fa1\u6a5f\u5668\u306b\u8a8d\u8a3c\u306a\u3057\u3067\u9060\u9694\u64cd\u4f5c\u3055\u308c\u308b\u6b20\u9665\u3000\u3059\u3067\u306b\u60aa\u7528\u3000JPCERT/CC\u300c\u56fd\u5185\u3067\u5e83\u304f\u5229\u7528\u300d\u3000\u6df1\u523b\u5ea6\u306f10\u70b9\u6e80\u70b9\u306e9.8\n\nJPCERT/CC\u306f9\u670824\u65e5\u3001\u7c73F5\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u6a5f\u5668\u300cBIG-IP APM\u300d\u306b\u3001\u8a8d\u8a3c\u3092\u53d7\u3051\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u9060\u9694\u304b\u3089\u4efb\u610f\u306e\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3067\u304d\u308b\u6b20\u9665\uff08CVE-2026-94127\uff09\u304c\u3042\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u51fa\u3057\u305f\u3002\n\n#\u65e5\u672c\u6642\u4e8b\u65b0\u805e #\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-09-28T03:08:41.900989Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/df279f74-791a-44ba-a4cf-363dbdbad682/export"/>
    <published>2026-09-28T03:08:41.900989+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d66ea59b-3fbc-43d4-95ea-d7d6b9633d16/export</id>
    <title>d66ea59b-3fbc-43d4-95ea-d7d6b9633d16</title>
    <updated>2026-09-29T19:12:53.044600+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d66ea59b-3fbc-43d4-95ea-d7d6b9633d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94127", "type": "seen", "source": "https://bsky.app/profile/planetbriefing.bsky.social/post/3mwk7ikwbe52h", "content": "CVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability\n\nCISA reports a heap-based buffer overflow in F5 BIG-IP APM that can occur when a\u2026\n\nhttps://planetbriefing.com/events/cve-2026-94127-f5-big-ip-apm-heap-based-buffer-overflow-vulnerability-aa1501af7b61\n\n#Technology #UnitedStates", "creation_timestamp": "2026-09-28T01:55:43.372175Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d66ea59b-3fbc-43d4-95ea-d7d6b9633d16/export"/>
    <published>2026-09-28T01:55:43.372175+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/68d590c5-ae34-43bf-a1bf-9584354fa4e7/export</id>
    <title>68d590c5-ae34-43bf-a1bf-9584354fa4e7</title>
    <updated>2026-09-29T19:12:53.044700+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "68d590c5-ae34-43bf-a1bf-9584354fa4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mwjxkmei7u2z", "content": "Hackers target a critical flaw in F5 BIG-IP APM (CVE-2026-94127) that allows code execution without login, especially when APM acts as an OAuth server. F5 issued hotfixes on Sept 22.", "creation_timestamp": "2026-09-27T23:33:41.572708Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/68d590c5-ae34-43bf-a1bf-9584354fa4e7/export"/>
    <published>2026-09-27T23:33:41.572708+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/932dc204-ec4c-4c3d-bdd6-86d65f5ce7c8/export</id>
    <title>932dc204-ec4c-4c3d-bdd6-86d65f5ce7c8</title>
    <updated>2026-09-29T19:12:53.044792+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "932dc204-ec4c-4c3d-bdd6-86d65f5ce7c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mwjdpugzc625", "content": "CVE-2026-94127 Explained: F5 BIG-IP APM Heap Overflow Attack https://packetstorm.news/news/view/44158 #news", "creation_timestamp": "2026-09-27T17:38:42.948064Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/932dc204-ec4c-4c3d-bdd6-86d65f5ce7c8/export"/>
    <published>2026-09-27T17:38:42.948064+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/87e56e6b-7c88-425b-aa32-81eb8462e45c/export</id>
    <title>87e56e6b-7c88-425b-aa32-81eb8462e45c</title>
    <updated>2026-09-29T19:12:53.044889+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "87e56e6b-7c88-425b-aa32-81eb8462e45c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94127", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwia73wqiz24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-94127: 29 interactions\nCVE-2026-86296: 25 interactions\nCVE-2026-87902: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-35273: 8 interactions\nCVE-2026-81578: 7 interactions\nCVE-2026-82078: 6 interactions\n", "creation_timestamp": "2026-09-27T07:02:59.972797Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/87e56e6b-7c88-425b-aa32-81eb8462e45c/export"/>
    <published>2026-09-27T07:02:59.972797+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a24b7cd9-f13f-46b1-80d5-66db2a3b2636/export</id>
    <title>a24b7cd9-f13f-46b1-80d5-66db2a3b2636</title>
    <updated>2026-09-29T19:12:53.044981+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a24b7cd9-f13f-46b1-80d5-66db2a3b2636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94127", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwhfm6f3k42i", "content": "\ud83d\udccc F5 BIG-IP Unauthenticated Heap-Overflow to RCE Vulnerability CVE-2026-94127 https://www.cyberhub.blog/article/32567-f5-big-ip-unauthenticated-heap-overflow-to-rce-vulnerability-cve-2026-94127", "creation_timestamp": "2026-09-26T23:07:07.142495Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a24b7cd9-f13f-46b1-80d5-66db2a3b2636/export"/>
    <published>2026-09-26T23:07:07.142495+00:00</published>
  </entry>
</feed>
