Cloudflare outage on February 20, 2026

Cloudflare's February 20, 2026 outage was caused by a software bug that unintentionally withdrew 25% of BYOIP prefixes via BGP, disrupting services for over 6 hours.

• •A cleanup sub-task queried the Addressing API with a bug: passing `pending_delete` with no value caused the server to return all BYOIP prefixes instead of only those pending deletion.
• •1,100 of 4,306 BYOIP prefixes were withdrawn between 17:56 and 18:46 UTC, rendering affected customer services unreachable; one.one.one.one returned HTTP 403 errors.
• •Affected products included Core CDN, Spectrum, Dedicated Egress, and Magic Transit; DNS resolution over the 1.1.1.1 Public Resolver was not impacted.
• •Some customers self-remediated via the Cloudflare dashboard; ~300 prefixes required manual engineer restoration after a bug removed their edge configurations.
• •Staging environment and test coverage were insufficient because tests focused on customer-initiated API flows, not the task-runner independently modifying user data.