Security Resilience
← All news
Confirmed

AL26-022 - Vulnerability impacting F5 BIG-IP Access Policy Manager (APM) – CVE-2026-94127

Our takeCanadian Cyber Centre warns of an actively exploited vulnerability in F5 BIG-IP APM (CVE-2026-94127). Patch on your emergency path if you run it; this one sits at the edge so the call is the same regardless of org size.Cyber Resilience desk
Sources (1)
What this means for you — Security leader:Canadian Cyber Centre reports active exploitation of CVE-2026-94127 in F5 BIG-IP APM. Apply the vendor patch or mitigations on an emergency change if you run on-prem APM.
What this means for you — Lean IT orgs:If you run F5 BIG-IP Access Policy Manager on-prem, update it now using the Canadian Cyber Centre guidance. Most lean teams use cloud access services instead and can ignore this.
What this means for you — MSP:Check every client running on-prem F5 BIG-IP APM and apply the CVE-2026-94127 patch or mitigations immediately. Cloud-hosted access services are not affected.
What this means for you — Researcher:AL26-022 from CCCS confirms active exploitation of CVE-2026-94127 in F5 BIG-IP APM. Patch or follow the published workarounds.