Vulnerabilities that WAF cannot prevent have emerged

Hello, this is Nishizawa, a Cloudflare enthusiast.On October 15, 2026, a serious vulnerability in the Linux kernel was disclosed. The number is CVE-2026-99999, commonly known as "PwnEscape." The CVSS ...
techtarget

What is a web application firewall (WAF)? WAF explained

A web application firewall (WAF) is a firewall that is meant to protect web applications against common web-based threats. A WAF monitors, filters and blocks Hypertext Transfer Protocol (HTTP) traffic ...
BleepingComputer

Hackers exploit SiteGuard WAF flaw to run commands as admins

Hackers are exploiting an OS command-injection vulnerability in the SiteGuard Server Edition web application firewall (WAF), allowing them to execute commands with root or SYSTEM privileges on ...
BleepingComputer

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume ...