Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

/in

Cloudflare has addressed a security vulnerability impacting its Automatic Certificate Management Environment (ACME) validation logic that made it possible to bypass security controls and access origin servers. 
“The vulnerability was rooted in how our edge network processed requests destined for the ACME HTTP-01 challenge path (/.well-known/acme-challenge/*),” the web infrastructure

The Hacker News – ​Read More

Critical Infrastructure Attacks Became Routine for Hacktivists in 2025Critical Infrastructure Attacks Became Routine for Hacktivists in 2025What a Linux root user can do – and 8 ways you should absolutely never...