Topic
6 articles
CyberSecureToday covers Cloudflare across 6 articles published between 22 Sep 2026 and 1 Nov 2026.
The coverage includes 5 vulnerability advisories and 1 analysis or guidance piece. 4 advisories are rated critical or high severity.
Stories on Cloudflare most often intersect with Cache Poisoning, Edge Computing and Web Security, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Cloudflare Q3 Threat Telemetry: Network-Layer DDoS Attacks Surge 38% to Record 18.2 Million Incidents”, was published 1 Nov 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Deep DiveCloudflare's Q3 threat report details an unprecedented 38% surge in network-layer DDoS attacks, recording 18.2 million volumetric and carpet-bombing floods.
Threat IntelEmergency updates in PHP 8.5, 8.4, 8.3, and 8.2 fix the 'PHP2Shell' dual memory corruption flaws (CVE-2026-109618 and CVE-2026-109619), exposing servers to pre-execution code execution.
Threat IntelCloudflare resolves critical vulnerability CVE-2026-73190 in Workers KV edge caching, where HTTP Range header normalization flaws allowed global cache poisoning.
Data BreachCloudflare Security releases an advisory addressing a vulnerability in Workers KV edge namespace routing allowing potential cross-tenant cache token retrieval.
Threat IntelCloudflare security advisory details a rule engine normalization defect enabling request smuggling and WAF inspection bypass.
Threat IntelCloudflare and OpenNext patch high-severity flaw CVE-2026-3125, where path normalization bypasses allow attackers to trigger SSRF and extract private Next.js cache assets.