Skip to content

WAF - WAF Release - 2026-04-30 - Emergency

UpdateUnverifiedAdded Sep 24, 2026

This emergency release introduces a new rule to block a cPanel & WHM Authentication Bypass related to CVE-2026-41940. Key Findings CVE-2026-41940: A critical authentication bypass vulnerability in cPanel & WHM allows unauthenticated remote attackers to bypass authentication mechanisms and gain unauthorized administrative access to the web hosting control...

Topics: Security

Cloudflare's release notes

More Cloudflare developer platform releases

Every Cloudflare developer platform release

Also shipped on Apr 30, 2026

Cloudflare in April 2026

Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.

New releases by email

Tuesday mornings: the week's data, AI and developer-tools releases, only in weeks when something shipped.

Double opt-in. Unsubscribe any time.