Last Modified: Jul 28, 2026
Affected Product(s):
BIG-IP APM
Fixed In:
21.1.0.1, 21.0.0.3, 17.1.3.4
Opened: Jun 11, 2026 Severity: 2-Critical
After upgrading to BIG-IP APM version 17.1.3.2, users with a single quote (') in their surname or username (e.g., "o'brien", "labmno'test") are unable to log in via the APM logon page. The system logs show input validation failures for such usernames, with hexadecimal conversion of the input value and error messages indicating rejection
Legitimate users with a single quote in their username or surname cannot log in to applications protected by BIG-IP APM. This affects user access and may disrupt business operations with such naming conventions
BIG-IP APM version 17.1.3.2 Usernames containing a single quote (') character
None
None