Resolved
The F5 Distributed Cloud team has successfully deployed the fix across all Regional Edges. The issue causing false-positive security events on the Web Application Firewall (WAF) has been resolved.
Applications remained protected throughout the incident, and WAF security enforcement continued to operate as expected.
We appreciate your patience and understanding while we worked to resolve this matter. If you continue to experience any issues or have further questions, please don't hesitate to reach out to our support team.
If you are experiencing an impact and require immediate assistance, please contact our Support team at support@cloud.f5.com or call the appropriate regional number listed on our website: https://my.f5.com/manage/s/article/K000135931.
Posted Sep 17, 2026 - 23:55 UTC
Identified
The F5 Distributed Cloud team has identified the root cause behind the false positive alerts being triggered on Web Application Firewall (WAF). We are now diligently working on implementing a fix to address the issue.
Applications remain protected, and WAF security enforcement continues to operate as expected.
We are treating this incident with the highest urgency and will provide further updates as they become available. Please continue to monitor our Statuspage (https://www.f5cloudstatus.com/) for the latest information.
If you are experiencing an impact and require immediate assistance, please contact our Support team at support@cloud.f5.com or call the appropriate regional number listed on our website: https://my.f5.com/manage/s/article/K000135931.
Posted Sep 17, 2026 - 22:30 UTC
Update
Impact: We are actively working to resolve an issue causing false-positive security events on our Web Application Firewall (WAF). Please be assured that your applications remain fully protected and security enforcement is active.
Our investigation into the issue affecting WAF is ongoing. We are actively working to resolve an issue causing false-positive security events on our Web Application Firewall (WAF). Please be assured that your applications remain fully protected and security enforcement is active.
Current investigative actions:
Our engineering teams are working to implement a fix at the earliest time possible, and we will share updates here as they progress.
We are treating this incident with the highest urgency and will continue to provide updates as more information becomes available. Please monitor our Statuspage (https://www.f5cloudstatus.com/) for live updates.
If you are experiencing an impact and requires immediate assistance, please contact our Support team at support@cloud.f5.com or call the appropriate regional number listed on our website: https://my.f5.com/manage/s/article/K000135931.
Posted Sep 17, 2026 - 20:38 UTC
Investigating
This advisory is to inform you that we are currently investigating reports of service degradation affecting Global WAF Signature Blocking Regression.
We understand this may be affecting your operations and we are committed to providing transparent and timely updates as more information becomes available. While we gather more information, we recommend monitoring the progress on this site (https://www.f5cloudstatus.com/) for the latest update.
Investigation Status:
• We have identified potential service impact at 6:40 PM UTC
• Our incident response team has been fully mobilized;
• Initial investigation and impact assessment efforts are underway.
Next Steps:
• A detailed incident notification will be provided within 30 minutes;
• Our teams are working to determine the root cause of the incident;
• We will share mitigation steps as soon as they become available.
We appreciate your patience as we work to resolve this situation. If you are experiencing a critical business impact, please contact our support team through your established channels.
Thank you for your continued support and trust in F5.
Posted Sep 17, 2026 - 19:48 UTC
This incident affected: North America PoPs (Ashburn (dc12), VA, United States, Ashburn (b-dc12), VA, United States, Ashburn (c-dc12), VA, United States, New York (ny8), NY, United States, New York (b-ny8), NY, United States, San Jose (sv10), CA, United States, San Jose (b-sv10), CA, United States, Seattle, WA, United States, Toronto, Canada, Dallas (dal3), TX, United States, Dallas (b-dal3), TX, United States, Atlanta, GA, United States, Montreal, Canada, Chicago, IL, United States, Querétaro, Mexico), South America PoPs (Sao Paulo, Brazil), Europe PoPs (Amsterdam, Netherlands, Frankfurt (fr4), Germany, Frankfurt (b-fr4), Germany, London (tn2), United Kingdom, London (b-tn2), United Kingdom, Paris (pa2), France, Paris (pa4), France, Madrid, Spain, Lisbon, Portugal, Stockholm, Sweden, Milan, Italy), Asia PoPs (Singapore, Singapore, Tokyo, Japan, Osaka, Japan, Hong Kong, Asia, Mumbai (mb2), India, Mumbai (b-mb2), India, Chennai, India, Jakarta, Indonesia, Seoul, South Korea), Oceania PoPs (Sydney, Australia, Melbourne, Australia), and Middle East PoPs (Dubai, United Arab Emirates, Tel Aviv, Israel).