Spring Framework CVE-2026-47892: Critical Header Predicate Bypass in WebFlux Functional Endpoints
Spring Framework CVE-2026-47892: Critical Header Predicate Bypass in WebFlux Functional
Security News
Spectre Strikes the Edge: Cloudflare Workers Leak JWTs at 12 Bits/Second
Spectre Strikes the Edge: Cloudflare Workers Leak JWTs at 12 Bits/Second
Next.js CVE-2026-75604: Critical Windows RCE and AVIF Image Optimizer RCE Patched in Emergency Release
Two Critical Next.js Vulnerabilities Patched in Emergency Release
On August 25,
Cloudflare DDoS Threat Report H1 2026: 1 Tbps Attacks Soar as DNS Floods Dominate
Cloudflare DDoS Threat Report H1 2026: 1 Tbps Attacks Soar
Cloudflare has
Cloudflare WAF Blocks WordPress CVE-2026-65640 RCE With Emergency Ruleset Update
Cloudflare has shipped an emergency update to its Web Application Firewall (WAF)
Microsoft SharePoint RCE Chain Actively Exploited as PoC Exploits Go Public
A pair of vulnerabilities in Microsoft SharePoint is being actively exploited in
Critical Gitea Vulnerability CVE-2026-60004 Exploited for Crypto-Mining
A critical vulnerability in Gitea, the popular self-hosted Git service, is
Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Exploited in the Wild After PoC Release
A memory overflow vulnerability in Citrix NetScaler is being actively exploited for
Cloudflare Now Detects MCP Traffic: Securing AI Agent Infrastructure
Cloudflare has announced that its Gateway service can now detect Model Context
OWASP ModSecurity CRS 4.29.0 Closes Shell Evasion Bypasses, Expands Web Shell Signatures
The OWASP ModSecurity Core Rule Set (CRS) has released version 4.29.