F5 Patches Critical BIG-IP APM Zero-Day Vulnerability

The record

Written from the 1 report below. Nothing here is unsourced.

A critical heap-based buffer overflow flaw in F5 BIG-IP Access Policy Manager allows unauthenticated attackers to execute remote code.
The vulnerability affects systems configured as OAuth authorization servers.
F5 released engineering hotfixes and recommended interim iRule mitigations to address the issue.
Security agencies including CISA and CERT-EU have issued advisories regarding the active exploitation of this flaw.

Review system logs for repeated failed OAuth requests and suspicious command execution
Monitor F5 support updates for final patch availability beyond initial engineering hotfixes
Assess impact of active exploitation by checking for TMM SIGABRT logs

1 report

English national1

All filed from India

Named United States · European Union · BIG-IP Access Policy Manager · CERT-EU · CISA · F5

The 1 report is listed beside the record.

Answers cite the reports above, or say they can't.