Tuesday, 20 January 2026

Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

iT4iNT SERVER Cloudflare has addressed a security vulnerability impacting its Automatic Certificate Management Environment (ACME) validation logic that made it possible to bypass security controls and access origin servers. 
"The vulnerability was rooted in how our edge network processed requests destined for the ACME HTTP-01 challenge path (/.well-known/acme-challenge/*)," the web infrastructure VDS VPS Cloud


http://dlvr.it/TQSD4d

No comments:

Post a Comment

Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

iT4iNT SERVER Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) ...