[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:f5":3},{"vendor":4,"products":15,"links":27,"research":35,"news":63,"iocs":116,"iocs_total":173,"activity":174},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"f5","F5","f5.com","https:\u002F\u002Fwww.f5.com\u002F","US","Application delivery and security company, maker of BIG-IP.","\u002Fvendor-logos\u002Ff5.png","#e31735","Unified delivery & security for applications, APIs, & AI workloads across any infrastructure, trusted by 85% of the Fortune 500. Secure your digital ecosystem.","2026-10-16T13:44:11.942666+00:00",[16],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"web-app-and-api-protection","F5 Web App and API Protection","https:\u002F\u002Fwww.f5.com\u002Fsolutions\u002Fweb-app-and-api-protection","Web application firewall, API security, bot management and DDoS mitigation, as a service or self-managed.","Learn how F5 security solutions protect web applications and APIs across hybrid multicloud architectures to reduce risk and complexity while unleashing innovation. [C",[23],{"slug":24,"name":25,"problem":26},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",[28,32],{"kind":29,"label":30,"url":31},"review","Gartner Peer Insights: F5 BIG-IP Advanced Web Application Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Ff5-big-ip-advanced-web-application-firewall",{"kind":29,"label":33,"url":34},"PeerSpot: F5 Advanced WAF user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Ff5-advanced-waf-reviews",{"total":36,"stories":37},5,[38,43,48,53,58],{"slug":39,"title":40,"published_at":41,"brief":42},"critical-f5-big-ip-vulnerability-exploited-as-zero-day-56b3d0","Critical F5 BIG-IP Vulnerability Exploited as Zero-Day","2026-09-23T07:34:18+00:00","Critical F5 BIG-IP vulnerability exploited as zero-day, allowing unauthenticated RCE.",{"slug":44,"title":45,"published_at":46,"brief":47},"mass-scanning-campaign-exploits-vite-flaw-to-extract-cloud-credentials-from-expo-bf27a7","Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers","2026-09-15T11:12:32+00:00","Mass-scanning campaign exploits Vite flaw to steal cloud credentials from exposed dev servers.",{"slug":49,"title":50,"published_at":51,"brief":52},"hackers-target-exposed-vite-dev-servers-to-steal-aws-azure-secrets-5aa4d6","Hackers target exposed Vite dev servers to steal AWS, Azure secrets","2026-09-14T16:15:58+00:00","Hackers exploit Vite dev servers via CVE-2026-39364 to steal AWS and Azure cloud secrets.",{"slug":54,"title":55,"published_at":56,"brief":57},"critical-flaw-in-software-powering-a-third-of-the-internet-is-already-being-expl-9bb7cc","Critical flaw in software powering a third of the internet is already being exploited – free checker now available","2026-05-20T14:04:36+00:00","NGINX critical flaw CVE-2026-42945 actively exploited days after disclosure; affects 30% of internet",{"slug":59,"title":60,"published_at":61,"brief":62},"critical-f5-big-ip-flaw-upgraded-to-9-8-rce-exploited-in-the-wild","Critical F5 BIG-IP Flaw Upgraded to 9.8 RCE, Exploited in the Wild","2026-03-31T11:36:21+00:00","F5 BIG-IP APM vulnerability CVE-2025-53521 upgraded to critical 9.8 RCE, actively exploited in the wild.",{"total":64,"stories":65},37,[66,71,76,81,86,91,96,101,106,111],{"slug":67,"title":68,"published_at":69,"brief":70},"f5-juniper-networks-patch-critical-vulnerabilities-e13b54","F5, Juniper Networks Patch Critical Vulnerabilities","2026-10-16T09:54:34+00:00","F5 and Juniper Networks release patches for dozens of critical vulnerabilities.",{"slug":72,"title":73,"published_at":74,"brief":75},"nginx-fixes-5-flaws-including-possible-rce-and-a-tls-bug-that-may-skip-client-ce-b1e071","NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks","2026-10-15T12:58:05+00:00","NGINX fixes five vulnerabilities, including potential RCE and a TLS flaw.",{"slug":77,"title":78,"published_at":79,"brief":80},"f5-patches-critical-big-ip-apm-zero-day-exploited-for-unauthenticated-rce-on-oau-54af9e","F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers","2026-09-23T08:29:48+00:00","F5 BIG-IP APM zero-day RCE vulnerability exploited in the wild.",{"slug":82,"title":83,"published_at":84,"brief":85},"cisa-adds-four-known-exploited-vulnerabilities-to-catalog-eba42a","CISA Adds Four Known Exploited Vulnerabilities to Catalog","2026-09-22T12:00:00+00:00","CISA adds four exploited vulnerabilities to KEV Catalog, impacting Check Point, Arista, and F5 products.",{"slug":87,"title":88,"published_at":89,"brief":90},"thai-broadband-provider-hacked-via-fortinet-vulnerability-da214e","Thai Broadband Provider Hacked via Fortinet Vulnerability","2026-09-15T13:33:58+00:00","Hackers exploit Fortinet and F5 vulnerabilities to breach Thai broadband provider 3BB.",{"slug":92,"title":93,"published_at":94,"brief":95},"f5-big-ip-apm-malware-injects-a-php-web-shell-into-memory-evading-disk-scans-88a031","F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans","2026-09-09T07:36:49+00:00","Malware injects PHP web shell into memory on F5 BIG-IP APM, evading disk-based detection.",{"slug":97,"title":98,"published_at":99,"brief":100},"hackers-breach-f5-big-ip-apm-devices-to-deploy-linux-rootkit-11f562","Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit","2026-09-08T20:08:55+00:00","Hackers deploy Linux rootkit on F5 BIG-IP APM devices via RCE vulnerability.",{"slug":102,"title":103,"published_at":104,"brief":105},"officials-disrupt-chinese-espionage-operation-that-hit-multiple-federal-agencies-d1bb8a","Officials disrupt Chinese espionage operation that hit multiple federal agencies","2026-08-26T19:35:05+00:00","US officials disrupt Chinese state-sponsored espionage operation targeting federal agencies.",{"slug":107,"title":108,"published_at":109,"brief":110},"new-infratrust-report-reveals-infrastructure-flaws-admins-should-patch-first-4bcb25","New InfraTrust report reveals infrastructure flaws admins should patch first","2026-07-22T14:15:00+00:00","Eclypsium launches InfraTrust report prioritizing infrastructure vulnerabilities for patching.",{"slug":112,"title":113,"published_at":114,"brief":115},"critical-nginx-vulnerability-can-crash-workers-and-may-allow-remote-code-executi-89f3cd","Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution","2026-07-19T20:42:49+00:00","Critical nginx heap buffer overflow (CVE-2026-42533) allows DoS and potential RCE via crafted HTTP requests.",[117,120,122,124,125,126,128,129,131,133,135,136,140,142,144,146,147,149,151,153,155,157,159,161,162,165,167,168,169,171],{"type":118,"value":119,"article_slug":67,"article_title":68,"published_at":69},"cve","CVE-2026-15176",{"type":118,"value":121,"article_slug":67,"article_title":68,"published_at":69},"CVE-2026-93479",{"type":118,"value":123,"article_slug":67,"article_title":68,"published_at":69},"CVE-2026-97205",{"type":118,"value":119,"article_slug":72,"article_title":73,"published_at":74},{"type":118,"value":121,"article_slug":72,"article_title":73,"published_at":74},{"type":118,"value":127,"article_slug":72,"article_title":73,"published_at":74},"CVE-2026-95101",{"type":118,"value":123,"article_slug":72,"article_title":73,"published_at":74},{"type":118,"value":130,"article_slug":72,"article_title":73,"published_at":74},"CVE-2026-97629",{"type":118,"value":132,"article_slug":77,"article_title":78,"published_at":79},"CVE-2025-53521",{"type":118,"value":134,"article_slug":77,"article_title":78,"published_at":79},"CVE-2026-94127",{"type":118,"value":134,"article_slug":39,"article_title":40,"published_at":41},{"type":118,"value":134,"article_slug":137,"article_title":138,"published_at":139},"f5-patches-big-ip-apm-zero-day-flaw-exploited-in-rce-attacks-e1f16a","F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks","2026-09-23T07:17:23+00:00",{"type":118,"value":141,"article_slug":82,"article_title":83,"published_at":84},"CVE-2026-85102",{"type":118,"value":143,"article_slug":82,"article_title":83,"published_at":84},"CVE-2026-93616",{"type":118,"value":145,"article_slug":82,"article_title":83,"published_at":84},"CVE-2026-93952",{"type":118,"value":134,"article_slug":82,"article_title":83,"published_at":84},{"type":118,"value":148,"article_slug":87,"article_title":88,"published_at":89},"CVE-2018-13379",{"type":118,"value":150,"article_slug":87,"article_title":88,"published_at":89},"CVE-2021-22986",{"type":118,"value":152,"article_slug":87,"article_title":88,"published_at":89},"CVE-2022-1388",{"type":118,"value":154,"article_slug":87,"article_title":88,"published_at":89},"CVE-2022-42475",{"type":118,"value":156,"article_slug":87,"article_title":88,"published_at":89},"CVE-2023-27997",{"type":118,"value":158,"article_slug":87,"article_title":88,"published_at":89},"CVE-2023-46747",{"type":118,"value":160,"article_slug":87,"article_title":88,"published_at":89},"CVE-2024-21762",{"type":118,"value":132,"article_slug":92,"article_title":93,"published_at":94},{"type":163,"value":164,"article_slug":92,"article_title":93,"published_at":94},"malware","c05d5254",{"type":163,"value":166,"article_slug":92,"article_title":93,"published_at":94},"PoisonedRefresh",{"type":118,"value":132,"article_slug":97,"article_title":98,"published_at":99},{"type":163,"value":166,"article_slug":97,"article_title":98,"published_at":99},{"type":118,"value":170,"article_slug":107,"article_title":108,"published_at":109},"CVE-2026-15409",{"type":118,"value":172,"article_slug":107,"article_title":108,"published_at":109},"CVE-2026-15410",100,[175,179,182,185,187,190],{"month":176,"reported":177,"affected":178},"2026-05-01",1,9,{"month":180,"reported":181,"affected":36},"2026-06-01",0,{"month":183,"reported":181,"affected":184},"2026-07-01",3,{"month":186,"reported":181,"affected":177},"2026-08-01",{"month":188,"reported":184,"affected":189},"2026-09-01",7,{"month":191,"reported":181,"affected":192},"2026-10-01",2]