F5 Distributed Cloud's WAF experienced a global signature blocking regression lasting approximately 4.2 hours on September 17, 2026, in which false-positive security events were triggered across Regional Edges worldwide. Despite the degradation, applications remained protected and WAF security enforcement continued to function throughout the incident. The root cause was identified and a fix was successfully deployed across all affected regions by 11:55 PM UTC.
Trusted by 1,000+ teams
Stop finding out about outages from your users. Monitor 6,320+ cloud services and get alerted the second something breaks.
The F5 Distributed Cloud team has successfully deployed the fix across all Regional Edges. The issue causing false-positive security events on the Web Application Firewall (WAF) has been resolved.
Applications remained protected throughout the incident, and WAF security enforcement continued to operate as expected.
We appreciate your patience and understanding while we worked to resolve this matter. If you continue to experience any issues or have further questions, please don't hesitate to reach out to our support team.
If you are experiencing an impact and require immediate assistance, please contact our Support team at support@cloud.f5.com or call the appropriate regional number listed on our website: https://my.f5.com/manage/s/article/K000135931.
The F5 Distributed Cloud team has identified the root cause behind the false positive alerts being triggered on Web Application Firewall (WAF). We are now diligently working on implementing a fix to address the issue.
Applications remain protected, and WAF security enforcement continues to operate as expected.
We are treating this incident with the highest urgency and will provide further updates as they become available. Please continue to monitor our Statuspage (https://www.f5cloudstatus.com/) for the latest information.
If you are experiencing an impact and require immediate assistance, please contact our Support team at support@cloud.f5.com or call the appropriate regional number listed on our website: https://my.f5.com/manage/s/article/K000135931.
Impact: We are actively working to resolve an issue causing false-positive security events on our Web Application Firewall (WAF). Please be assured that your applications remain fully protected and security enforcement is active.
Our investigation into the issue affecting WAF is ongoing. We are actively working to resolve an issue causing false-positive security events on our Web Application Firewall (WAF). Please be assured that your applications remain fully protected and security enforcement is active.
Current investigative actions:
Our engineering teams are working to implement a fix at the earliest time possible, and we will share updates here as they progress.
We are treating this incident with the highest urgency and will continue to provide updates as more information becomes available. Please monitor our Statuspage (https://www.f5cloudstatus.com/) for live updates.
If you are experiencing an impact and requires immediate assistance, please contact our Support team at support@cloud.f5.com or call the appropriate regional number listed on our website: https://my.f5.com/manage/s/article/K000135931.
This advisory is to inform you that we are currently investigating reports of service degradation affecting Global WAF Signature Blocking Regression.
We understand this may be affecting your operations and we are committed to providing transparent and timely updates as more information becomes available. While we gather more information, we recommend monitoring the progress on this site (https://www.f5cloudstatus.com/) for the latest update.
Investigation Status:
• We have identified potential service impact at 6:40 PM UTC
• Our incident response team has been fully mobilized;
• Initial investigation and impact assessment efforts are underway.
Next Steps:
• A detailed incident notification will be provided within 30 minutes;
• Our teams are working to determine the root cause of the incident;
• We will share mitigation steps as soon as they become available.
We appreciate your patience as we work to resolve this situation. If you are experiencing a critical business impact, please contact our support team through your established channels.
Thank you for your continued support and trust in F5.
With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.
Start free trialNo credit card required · Cancel anytime · 6320 services available
Integrations with