Skip to content
Cloud ChangelogAnnouncements from AWS, Google Cloud, Azure, Cloudflare and the main AI providers in one searchable changelog, with daily, weekly and monthly digests.
Get the digest
Back to feed

June 23, 2026 · Cloudflare

WAF - WAF Release - 2026-06-23

This week's release introduces new managed protection to address a critical pre-authentication OS command injection vulnerability in Ivanti Sentry (CVE-2026-10520).

Key Findings

  • CVE-2026-10520: An OS command injection vulnerability in Ivanti Sentry allows remote, unauthenticated attackers to execute arbitrary system commands with root privileges. The flaw stems from improper sanitization of input strings parsed during internal configuration handling.
RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare Managed Ruleset...242fdf83N/AIvanti Sentry - Command Injection - CVE:CVE-2026-10520LogBlock

This is a new detection.

Read on developers.cloudflare.com
Cloud Changelog

Announcements from AWS, Google Cloud, Azure, Cloudflare and the main AI providers in one searchable changelog, with daily, weekly and monthly digests.

Cloud Changelog is an independent site. It is not affiliated with or endorsed by Amazon Web Services, Google, Microsoft, Cloudflare, OpenAI, Anthropic, Mistral AI or xAI. Their names and trademarks belong to their owners.