CFADVISORY-CL-application-security-waf-waf-release-2026-10-30
WAF - WAF Release - 2026-10-30
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 14 are already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
WAF - WAF Release - 2026-10-30
WAF - WAF Release - 2026-10-30
WAF - WAF Release - 2026-10-28
WAF - WAF Release - 2026-10-28
WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Managed Ruleset
WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Managed Ruleset
WAF - WAF Release - 2026-10-12
CVEs:CVE-2026-21589
WAF - WAF Release - 2026-10-12
CVEs:CVE-2026-21589
WAF - WAF Release - 2026-10-25 - Emergency - Cloudflare Managed Ruleset
CVEs:CVE-2026-111497
WAF - WAF Release - 2026-10-25 - Emergency - Cloudflare Managed Ruleset
CVEs:CVE-2026-111497
WAF - WAF Release - 2026-10-01 - Emergency
CVEs:CVE-2026-88771
WAF - WAF Release - 2026-10-01 - Emergency
CVEs:CVE-2026-88771
WAF - WAF Release - 2026-10-06
WAF - WAF Release - 2026-10-06
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.