---
title: "F5: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/f5/
description: "Every F5 vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (4), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-09-22
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# F5: known exploited vulnerabilities

- 2026-09-22 [CVE-2026-94127](https://erroneo.us/security/cve/CVE-2026-94127/index.md) F5 BIG-IP APM: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (due 2026-09-25; ransomware: Unknown)
- 2026-03-27 [CVE-2025-53521](https://erroneo.us/security/cve/CVE-2025-53521/index.md) F5 BIG-IP: F5 BIG-IP Stack-Based Buffer Overflow Vulnerability (due 2026-03-30; ransomware: Unknown)
- 2023-10-31 [CVE-2023-46748](https://erroneo.us/security/cve/CVE-2023-46748/index.md) F5 BIG-IP Configuration Utility: F5 BIG-IP Configuration Utility SQL Injection Vulnerability (due 2023-11-21; ransomware: Unknown)
- 2023-10-31 [CVE-2023-46747](https://erroneo.us/security/cve/CVE-2023-46747/index.md) F5 BIG-IP Configuration Utility: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability (due 2023-11-21; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/f5/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt