Skip to content
Cloudflare Zero-Day Vulnerability Exposed

Cloudflare Zero-Day Vulnerability Exposed

First seen 21 Jan 2026, 06:39 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A zero-day vulnerability in Cloudflare's Web Application Firewall (WAF) was discovered, allowing attackers to bypass security controls and access protected origin servers. The flaw was identified by security researchers from FearsOff, who noted that requests to the /.well-known/acme-challenge/ directory could reach origins despite WAF rules blocking other traffic.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 212d ago How this analysis works

More articles in this cluster (2)