Cloudflare
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 96 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 2, 2020 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Header Accordions: QPACK amplification attacks against HTTP/3 servers
Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments
Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass
Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits
WordPress App for Cloudflare® plugin <= 1.10.1 - Broken Access Control vulnerability
Cloudflare’s CAA flaw looks impractical for criminals — but what about actors who control the network?
Resource exhaustion in quiche HTTP/3 and QPACK layers
Unbounded path event queue growth in quiche via peer-driven source connection ID rotation
Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records
Monitor Cloudflare in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.