cloudflare pingora

Name: cloudflare pingora
Brand: cloudflare

productUS

cpe:2.3:a:cloudflare:pingora:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

2critical1high1medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-2835US	critical9.1	0.82% (57th)	—	0.8.0	2026-03-05	< 0.8.0
CVE-2026-2833US	critical9.1	0.69% (53rd)	—	0.8.0	2026-03-05	< 0.8.0
CVE-2025-4366US	medium6.1	0.54% (45th)	—	0.5.0	2025-05-22	< 0.5.0
CVE-2026-2836US	high8.1OT elevated	0.41% (35th)	—	0.8.0	2026-03-05	< 0.8.0

The flaw types (CWEs) most of these CVEs share.

CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')3 CVEs
CWE-345Insufficient Verification of Data Authenticity1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.