CFADVISORY-CL-application-security-waf-waf-release-2025-06-02

Exploit Intelligence

• ShadowRay RCE POC (CVE-2023-48022) (github-poc-repo)
• These PoC python scripts test the Kemp LoadMaster for remote code execution. (github-poc-repo)
• These PoC python scripts test the Kemp LoadMaster for remote code execution. (github-poc)
• ShadowRay RCE POC (CVE-2023-48022) (github-poc)
• CVE-2023-48022 exploit modified from Bishop Fox work (github-poc)
• kev.json (github-poc)
• data.js (github-poc)
• incidents.js (github-poc)
• Nuclei Template: CVE-2025-34027 (nuclei-template)
• Nuclei Template: CVE-2025-34026 (nuclei-template)

…and 2 more exploits

Timeline

• Jun 2, 2025 CVE Published

References

• WAF - WAF Release - 2025-06-02 advisory