Cloudflare Security Advisories — April 2025 — Cloudflare Security Advisories

Cloudflare Security Advisories · April 2025 — Cloudflare Security Advisories

4 advisories 22 CVEs 3 EXPLOITED

Cloudflare CNA advisories (GHSA, blog, changelog) for 2025-04. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 3 are already weaponised in the wild — see the Exploited section.

Back to archive Open Console

Advisories

CFADVISORY-CL-application-security-waf-waf-release-2025-04-26-emerg

Changelog2025-04-26

WAF - WAF Release - 2025-04-26 - Emergency

CVEs:CVE-2025-43864 CVE-2025-43865

Upstream advisory

CFADVISORY-CL-application-security-waf-waf-release-2025-04-22

ChangelogExploited2025-04-22

WAF - WAF Release - 2025-04-22

CVEs:CVE-2021-35587 CVE-2023-22047 CVE-2023-7028 CVE-2025-20229 CVE-2025-22457 CVE-2025-31161

Upstream advisory

CFADVISORY-CL-application-security-waf-waf-release-2025-04-14

ChangelogExploited2025-04-14

WAF - WAF Release - 2025-04-14

CVEs:CVE-2025-29927

Upstream advisory

CFADVISORY-CL-application-security-waf-waf-release-2025-04-02

ChangelogExploited2025-04-02

WAF - WAF Release - 2025-04-02

CVEs:CVE-2011-1892 CVE-2018-9126 CVE-2021-31805 CVE-2022-24108 CVE-2022-31474 CVE-2023-46805 CVE-2024-21887 CVE-2024-22024 CVE-2024-42640 CVE-2024-4885 CVE-2025-24813 CVE-2025-27218 CVE-2025-29891

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console