F5 patches critical zero-day flaw exploited in BIG-IP APM

The vulnerability, identified as CVE-2026-94127, is a heap-based buffer overflow affecting BIG-IP APM systems configured as OAuth Authorization Servers with specific access policy and OAuth profile settings.