CFADVISORY-CL-application-security-waf-waf-release-2026-05-04
WAF - WAF Release - 2026-05-04
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 6 are already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
WAF - WAF Release - 2026-05-04
WAF - WAF Release - 2026-05-04
WAF - WAF Release - 2026-05-15 - Emergency
CVEs:CVE-2026-42945
WAF - WAF Release - 2026-05-15 - Emergency
CVEs:CVE-2026-42945
Workers, WAF - WAF and framework adapter mitigations for React and Next.js vulnerabilities
Workers, WAF - WAF and framework adapter mitigations for React and Next.js vulnerabilities
WAF - WAF Release - 2026-05-20
CVEs:CVE-2025-53693
WAF - WAF Release - 2026-05-20
CVEs:CVE-2025-53693
WAF - WAF Release - 2026-05-07 - Emergency
CVEs:CVE-2026-44575
WAF - WAF Release - 2026-05-07 - Emergency
CVEs:CVE-2026-44575
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.