CERT-EU 2026-09-22

2026-013: Critical Vulnerability in F5 BIG-IP APM

Machine-generated analysis · WAYSCloud LLM

F5 BIG-IP APM is affected by a vulnerability that is being exploited.

Context

The advisory concerns F5 BIG-IP Access Policy Manager (APM). F5 confirmed that the vulnerability is being actively exploited in the wild. CERT-EU advises that operators take appropriate actions promptly.

Operator considerations

Check: Verify inventory of F5 BIG-IP APM instances and their versions.
Isolate: Limit network access to the APM devices until mitigations are applied.
Log: Monitor for anomalous authentication attempts or traffic targeting the APM.

From Computer Emergency Response Team for the EU institutions ↗

On 22 September 2026, F5 published an advisory addressing a critical vulnerability affecting its BIG-IP APM product. The vendor confirmed active exploitation in the wild.

CERT-EU recommends taking appropriate actions as soon as possible.

Read the full advisory on CERT-EU →