Cloud Armor

Google Cloud Armor HTTP/2 Adaptive Protection Rule Bypass Permits WAF Circumvention (CVE-2026-56214)

Google Cloud Security discloses a vulnerability in Cloud Armor WAF Adaptive Protection allowing attackers to bypass rate limiting via multiplexed HTTP/2 frames.