Cloudflare Zero-Day Vulnerability Exposed

Cloudflare Zero-Day Vulnerability Exposed

First seen 21 Jan 2026, 06:39 UTC •CybersecuritynewsGbhackers •24.1

Article Content

Browse articles
ThreatCluster

A zero-day vulnerability in Cloudflare's Web Application Firewall (WAF) was discovered, allowing attackers to bypass security controls and access protected origin servers. The flaw was identified by security researchers from FearsOff, who noted that requests to the /.well-known/acme-challenge/ directory could reach origins despite WAF rules blocking other traffic.

How this analysis works

Extracted Entities

1 / 2