Cloudflare Security Advisories — December 2025 — Cloudflare Security Advisories

Cloudflare Security Advisories · December 2025 — Cloudflare Security Advisories

4 advisories 5 CVEs 4 EXPLOITED

Cloudflare CNA advisories (GHSA, blog, changelog) for 2025-12. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 4 are already weaponised in the wild — see the Exploited section.

Back to archive Open Console

Advisories

CFADVISORY-CL-application-security-waf-waf-release-2025-12-18

ChangelogExploited2025-12-18

WAF - WAF Release - 2025-12-18

CVEs:CVE-2021-26084

Upstream advisory

CFADVISORY-CL-application-security-waf-waf-release-2025-12-11-emerg

ChangelogExploited2025-12-11

WAF - WAF Release - 2025-12-11 - Emergency

CVEs:CVE-2025-55183 CVE-2025-55184

Upstream advisory

CFADVISORY-2025-cloudflare-waf-proactively-prote

BlogExploited2025-12-03

Cloudflare WAF proactively protects against React vulnerability

CVEs:CVE-2025-55182

Upstream advisory

CFADVISORY-CL-application-security-waf-waf-release-2025-12-01

ChangelogExploited2025-12-01

WAF - WAF Release - 2025-12-01

CVEs:CVE-2025-34299

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console