Cloudflare vulnerabilities
66 CVEs and advisories name Cloudflare as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-12708Unbounded HTTP/3 Datagram flow map growth in tokio-quiche
- CVE-2026-105299Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments
- CVE-2026-105298Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass
- CVE-2026-105297Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits
- CVE-2026-11325cloudflare/pages-action is deprecated — migration required by September 18th, 2026
- CVE-2026-12523Resource exhaustion in quiche HTTP/3 and QPACK layers
- CVE-2026-12707Unbounded path event queue growth in quiche via peer-driven source connection ID rotation
- CVE-2026-14440Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records
- CVE-2026-11941Use-after-free in connection ID iterator and FFI functions
- CVE-2026-2836Cache poisoning via insecure-by-default cache key
- CVE-2026-2835HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
- CVE-2026-2833HTTP Request Smuggling via Premature Upgrade
- CVE-2026-1229Incorrect calculation in CIRCL secp384r1 CombinedMult
- CVE-2026-0933OS Command Injection in `wrangler pages deploy`
- CVE-2025-13353gokey allows secret recovery from a seed file without the master password
- CVE-2025-59427Cloudflare vite plugin exposes secrets over the built-in dev server
- CVE-2025-7054Infinite loop triggered by connection ID retirement
- CVE-2025-4821Incorrect congestion window growth by invalid ACK ranges
- CVE-2025-4820Incorrect congestion window growth by optimistic ACK
- CVE-2021-3978Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki
- CVE-2025-0651File symlink abuse might lead to deleting files belonging to SYSTEM user
- CVE-2024-1410Unbounded storage of information related to connection ID retirement, in quiche
- CVE-2024-1765Unlimited resource allocation by QUIC CRYPTO frames flooding in quiche
- CVE-2024-0212Cloudflare WordPress plugin enables information disclosure of Cloudflare API (for low privileged users)
- CVE-2023-6992Memory corruption issues is Cloudflare zlib implementation
- CVE-2023-7080Arbitrary remote code execution within wrangler dev Workers sandbox
- CVE-2023-7079Arbitrary remote file read in Wrangler dev server
- CVE-2023-7078Server-Side Request Forgery (SSRF) in Miniflare
- CVE-2023-6193Unbounded queuing of path validation messages in cloudflare-quiche
- CVE-2023-6180Resource exhaustion via memory leak in tokio-boring