Skip to content
OpenAdvisories

Vendor

Cloudflare

65 known vulnerabilities.

Products

WARP 14 quiche 9 octorpki 9 https://github.com/cloudflare/pingora 6 Wrangler 4 WARP Client 4 cloudflared 2 CIRCL 2 lua-resty-json 1 Cloudflare-WordPress 1 gokey 1 tokio-boring 1 lol-html 1 Universal SSL 1 odoh-rs 1 zlib 1 Cloudflare WARP for Windows 1 workerd 1 goflow 1 miniflare 1 https://github.com/cloudflare/pages-action 1 workers-sdk 1 cfnts 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-12523 Public exploit

    Resource exhaustion in quiche HTTP/3 and QPACK layers

    Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames. Impact HTTP/3 defines multiple frame types to support HTTP message exchanges and connection management.…

    Cloudflare quiche
  • High 7.6
    CVE-2026-14440 Public exploit

    Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records

    Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without pa…

    Cloudflare Universal SSL
  • Medium 6.1
    CVE-2025-0651 Public exploit

    File symlink abuse might lead to deleting files belonging to SYSTEM user

    Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. User with a low system privileges  can create a set of symlinks inside the C:\ProgramData\Cloudflare\warp-diag-partials folder. After triggering the 'Reset all…

    Cloudflare WARP