Vulnerabilidades em Cloudflare
61 resultadosAnálise Vexday
Com 57 CVEs catalogadas e nenhuma registrada no CISA KEV, o histórico de vulnerabilidades da Cloudflare apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que indica um perfil de risco operacional relativamente contido. O tipo de falha mais frequente é CWE-20 (validação inadequada de entrada), categoria que exige atenção contínua em componentes expostos a dados externos. A CVE mais perigosa no momento, CVE-2021-3907, possui EPSS de 0,04, sugerindo probabilidade de exploração ainda baixa, embora seja o ponto focal para priorização de correção. A ausência de PoCs públicas reforça o cenário atual de menor pressão imediata, mas as duas CVEs de severidade crítica devem ser monitoradas de perto dado seu potencial de impacto.
CVE-2021-3907HIGHArbitrary filepath traversal via URI injectionEPSS 4.1%CVE-2023-3036HIGHOut of Bounds Slice index in cfnts leads to remote panicEPSS 2.2%CVE-2021-3909MEDIUMInfinite open connection causes OctoRPKI to hang foreverEPSS 1.5%CVE-2026-0933HIGHOS Command Injection in `wrangler pages deploy`EPSS 1.4%CVE-2021-3910MEDIUMNUL character in ROA causes OctoRPKI to crashEPSS 1.3%CVE-2021-3761HIGHOctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength valuesEPSS 1.2%CVE-2024-1765MEDIUMUnlimited resource allocation by QUIC CRYPTO frames flooding in quicheEPSS 1.2%CVE-2023-2754HIGHPlaintext transmission of DNS requests in Windows 1.1.1.1 WARP clientEPSS 0.9%CVE-2021-3911MEDIUMMisconfigured IP address field in ROA leads to OctoRPKI crashEPSS 0.9%CVE-2022-2529HIGHMultiple DoS Attack Vectors in sflow packet handlingEPSS 0.9%CVE-2024-0212HIGHCloudflare WordPress plugin enables information disclosure of Cloudflare API (for low privileged users)EPSS 0.8%CVE-2025-4821HIGHIncorrect congestion window growth by invalid ACK rangesEPSS 0.8%CVE-2021-3912MEDIUMOctoRPKI crashes when processing GZIP bomb returned via malicious repositoryEPSS 0.8%CVE-2023-3348MEDIUMDirectory traversal vulnerability in Cloudflare WranglerEPSS 0.8%CVE-2023-3766MEDIUMInvalid Slice Split Results in Server PanicEPSS 0.8%CVE-2025-4820MEDIUMIncorrect congestion window growth by optimistic ACKEPSS 0.8%CVE-2023-6193MEDIUMUnbounded queuing of path validation messages in cloudflare-quicheEPSS 0.8%CVE-2023-1862HIGHRemote access to warp-svc.exe in Cloudflare WARPEPSS 0.8%CVE-2023-3040LOWOut of Bounds Access Leading to Undefined BehaviorEPSS 0.7%CVE-2021-3908MEDIUMInfinite certificate chain depth results in OctoRPKI running foreverEPSS 0.7%