Products: 26
Vulnerabilities: 72
Known Exploited: 0
7
Critical Level Threats
24
High Level Threats
33
Medium Level Threats
4
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-105299
Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments
Last Modified: Oct 21, 2026
Published: Oct 20, 2026
CVE-2026-105298
Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass
Last Modified: Oct 21, 2026
Published: Oct 20, 2026
CVE-2026-105297
Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits
Last Modified: Oct 21, 2026
Published: Oct 20, 2026
CVE-2026-11325
cloudflare/pages-action is deprecated — migration required by September 18th, 2026
Last Modified: Aug 13, 2026
Published: Aug 12, 2026
CVE-2026-12523
Resource exhaustion in quiche HTTP/3 and QPACK layers
Last Modified: Jul 15, 2026
Published: Jul 14, 2026
Items Per Page
