Cloudflare Security Advisories — April 2026 — Cloudflare Security Advisories

Cloudflare Security Advisories · April 2026 — Cloudflare Security Advisories

5 advisories 15 CVEs 5 EXPLOITED

Cloudflare CNA advisories (GHSA, blog, changelog) for 2026-04. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 5 are already weaponised in the wild — see the Exploited section.

Back to archive Open Console

Advisories

CFADVISORY-CL-application-security-waf-waf-release-2026-04-30-emerg

ChangelogExploited2026-04-30

WAF - WAF Release - 2026-04-30 - Emergency

CVEs:CVE-2026-41940

Upstream advisory

CFADVISORY-CL-application-security-waf-waf-release-scheduled-change

ChangelogExploited2026-04-27

WAF - WAF Release - Scheduled changes for 2026-06-29

CVEs:CVE-2025-53693 CVE-2026-10520 CVE-2026-24423 CVE-2026-26980 CVE-2026-39808 CVE-2026-39813

Upstream advisory

CFADVISORY-CL-application-security-waf-waf-release-2026-04-21

ChangelogExploited2026-04-21

WAF - WAF Release - 2026-04-21

CVEs:CVE-2026-34197

Upstream advisory

CFADVISORY-CL-application-security-waf-waf-release-2026-04-15

ChangelogExploited2026-04-15

WAF - WAF Release - 2026-04-15

CVEs:CVE-2026-20079 CVE-2026-21643 CVE-2026-23864 CVE-2026-23869 CVE-2026-33057

Upstream advisory

CFADVISORY-CL-application-security-waf-waf-release-2026-04-07

ChangelogExploited2026-04-07

WAF - WAF Release - 2026-04-07

CVEs:CVE-2025-40552 CVE-2026-23744

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console