A bypass for Imperva WAF was discovered in the context of a Local File Inclusion (LFI) vulnerability. The WAF was blocking the standard traversal payload of '../../../', but by modifying the payload to '../../a/../../ = ../../../', the bypass was successful. This allowed the attacker to go back to more directories and load files. For more technical details and analysis, check out the blog post.