{"schema":"vulnpedia.research/1","cve":"CVE-2026-94127","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162605","tags":["vendor-advisory","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"f5","modified":"2026-09-23T00:45:09.611Z","origins":[{"source":"mitre","sourceId":"f5","modified":"2026-09-23T00:45:09.611Z","url":"https://my.f5.com/manage/s/article/K000162605"},{"source":"nvd","sourceId":"CVE-2026-94127","modified":"2026-09-23T14:32:07.910","url":"https://my.f5.com/manage/s/article/K000162605"},{"source":"vulncheck-kev","sourceId":"CVE-2026-94127","modified":"2026-09-22T00:00:00Z","url":"https://my.f5.com/manage/s/article/K000162605"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-94127","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-23T03:55:44.614Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-23T03:55:44.614Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-94127"},{"source":"nvd","sourceId":"CVE-2026-94127","modified":"2026-09-23T14:32:07.910","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-94127"}]},{"source":"euvd","sourceId":"EUVD-2026-84427","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-84427","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-84427","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-84427"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-94127","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-94127","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-94127","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-94127","modified":"2026-09-22T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://vulncheck.com/xdb/2dab7684917f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"2dab7684917f","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2dab7684917f","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/2dab7684917f"}]},{"url":"https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"2dab7684917f","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2dab7684917f","modified":"2026-09-22T00:00:00Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/FurkanKAYAPINAR/CVE-2026-94127","source":"poc-in-github","sourceId":"CVE-2026-94127","description":"CVE-2026-94127","modified":"2026-09-23T11:11:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-94127","url":"https://github.com/FurkanKAYAPINAR/CVE-2026-94127"},{"source":"poc-in-github","sourceId":"CVE-2026-94127","modified":"2026-09-23T11:11:13Z","url":"https://github.com/FurkanKAYAPINAR/CVE-2026-94127"}],"tags":[]},{"url":"https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127","source":"poc-in-github","sourceId":"CVE-2026-94127","modified":"2026-10-09T08:31:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-94127","url":"https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127"},{"source":"poc-in-github","sourceId":"CVE-2026-94127","modified":"2026-10-09T08:31:27Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"2dab7684917f","url":"https://vulncheck.com/xdb/2dab7684917f","cve":"CVE-2026-94127","dateAdded":"2026-09-24T19:22:13Z","modified":"2026-09-22T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127","observations":[{"dateAdded":"2026-09-24T19:22:13Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"2dab7684917f","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/2dab7684917f"}]}],"vendorStatements":[],"exploitationSources":[{"source":"euvd","sourceId":"EUVD-2026-84427","catalog":"ENISA EU KEV","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-84427","dateAdded":"2026-09-22","origins":[{"source":"euvd","sourceId":"EUVD-2026-84427","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-84427"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-94127","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-09-22T00:00:00Z","modified":"2026-09-22T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"F5","product":"BIG-IP APM","dueDate":"2026-09-25T00:00:00Z","cisaDateAdded":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-94127","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-94127","catalog":"VulnCheck KEV","kind":"report","url":"https://my.f5.com/manage/s/article/K000162605","dateAdded":"2026-09-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-94127","url":"https://my.f5.com/manage/s/article/K000162605"},{"source":"vulncheck-kev","sourceId":"CVE-2026-94127","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]}]}