CFADVISORY-CL-application-security-waf-waf-release-2025-12-18
WAF - WAF Release - 2025-12-18
CVEs:CVE-2021-26084
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 13 are already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
WAF - WAF Release - 2025-12-18
CVEs:CVE-2021-26084
WAF - WAF Release - 2025-12-18
CVEs:CVE-2021-26084
WAF - WAF Release - 2025-12-10 - Emergency
CVEs:CVE-2025-55182
WAF - WAF Release - 2025-12-10 - Emergency
CVEs:CVE-2025-55182
WAF - Increased WAF payload limit for all plans
CVEs:CVE-2025-55182
WAF - Increased WAF payload limit for all plans
CVEs:CVE-2025-55182
Cloudflare WAF proactively protects against React vulnerability
CVEs:CVE-2025-55182
WAF - WAF Release - 2025-12-03 - Emergency
CVEs:CVE-2025-55182
WAF - WAF Release - 2025-12-03 - Emergency
CVEs:CVE-2025-55182
WAF - WAF Release - 2025-12-01
CVEs:CVE-2025-34299
WAF - WAF Release - 2025-12-01
CVEs:CVE-2025-34299
WAF - WAF Release - 2025-12-11 - Emergency
WAF - WAF Release - 2025-12-11 - Emergency
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.