Cloudflare has addressed a security vulnerability impacting its Automatic Certificate Management Environment (ACME) validation logic that made it possible to bypass security controls and access origin servers. "The vulnerability was rooted in how our edge network processed requests destined for the ACME HTTP-01 challenge path (/.well-known/acme-challenge/*)," the web infrastructure
source https://thehackernews.com/2026/01/cloudflare-fixes-acme-validation-bug.html
Tuesday, January 20, 2026
Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box