CFADVISORY-CL-application-security-waf-waf-release-2026-07-14
WAF - WAF Release - 2026-07-14
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 6 are already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
WAF - WAF Release - 2026-07-14
WAF - WAF Release - 2026-07-14
WAF - WAF Release - 2026-07-21
CVEs:CVE-2026-48276CVE-2026-48282CVE-2026-60137CVE-2026-63030CVE-2026-64641CVE-2026-64642CVE-2026-64643CVE-2026-64644CVE-2026-64645CVE-2026-64646CVE-2026-64647CVE-2026-64648CVE-2026-64649
WAF - WAF Release - 2026-07-21
CVEs:CVE-2026-48276CVE-2026-48282CVE-2026-60137CVE-2026-63030CVE-2026-64641CVE-2026-64642CVE-2026-64643CVE-2026-64644CVE-2026-64645CVE-2026-64646CVE-2026-64647CVE-2026-64648CVE-2026-64649
WAF - WAF Release - 2026-07-01
CVEs:CVE-2026-39813
WAF - WAF Release - 2026-07-01
CVEs:CVE-2026-39813
Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.