Sploitus

7 exploited vulnerabilities in Cloudflared

Vulnerabilities with publicly known exploits

Vendors
Cloudflare, Lyft, Nginx, Ory, Amazon, Alibaba
With known exploits
7
Affected Ory Oathkeeper versions
< 26.2.0
Affected Nginxui Nginx Ui versions
≤ 2.3.3
Affected Ritlabs Tinyweb versions
< 2.02
Affected Cloudflare Cloudflared versions
< 2023.3.1
Affected Torchbox Wagtail versions
< 4.1.4, 4.2.2

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2026-33494
CVSS 10.0 CRITICAL 2026-03-20
CVE-2026-33030
CVSS 9.9 CRITICAL 2026-03-30FIX AVAILABLE
CVE-2025-58048
CVSS 9.9 CRITICAL 2025-08-28FIX AVAILABLE
CVE-2026-27633 1 exploit
CVSS 8.7 HIGH 2026-02-25FIX AVAILABLE
CVE-2023-1314
CVSS 7.8 HIGH 2023-03-21FIX AVAILABLE
CVE-2025-59427
CVSS 6.3 MEDIUM 2025-07-08FIX AVAILABLE
CVE-2023-28837
CVSS 4.9 MEDIUM 2023-04-03FIX AVAILABLE