Search
News
Evolution of Web3 in Cloud Supply Chain Attacks via Unit 42 (Palo Alto Networks)
4 real? Tracking exploitation and patching of eMudhra’s weak keys via Cloudflare Blog — Security
Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants via Cloudflare Blog — Security
Introducing the Cloudflare PHP Capture the Flag challenge via Cloudflare Blog — Security
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang via Cloudflare Blog — Security
Localizing compliance at scale: achieving South Korea’s ISMS certification via Cloudflare Blog — Security
Introducing full transaction detection for Cloudflare WAF via Cloudflare Blog — Security
Cloudflare deploys protections against php2shell vulnerability via Cloudflare Blog — Security
Vulnerabilities
CVE-2026-121431 AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows s...
CVE-2026-121420 SurrealDB from 3.2.0 before 3.3.0 contains a server-side request forgery vulnerability in...
CVE-2026-107059 An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logou...
CVE-2026-116680 HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox vali...
CVE-2026-116676 Atlantis is a self-hosted golang application that listens for Terraform pull request event...
CVE-2026-119724 ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTD...
CVE-2026-103327 The CryptoCloud WordPress plugin from 3.0.0 through 3.0.1 does not verify the authenticity...
CVE-2026-41017 Apache Airflow's `JWTRefreshMiddleware` set the JWT auth cookie without the `Secure` flag,...