Sploitus

7 exploited vulnerabilities in Cloudflared

Vulnerabilities with publicly known exploits

Vendors
Cloudflare, Lyft, Nginx, Ory, Amazon, Alibaba
With known exploits
7
Affected Ory Oathkeeper versions
< 26.2.0

Vulnerabilities with exploits

Highest CVSS first — each links to the exploits we have indexed

CVE-2026-33494
CVSS 10.0 CRITICAL 2026-03-20
CVE-2026-33030
CVSS 9.9 CRITICAL 2026-03-30FIX AVAILABLE
CVE-2025-58048
CVSS 9.9 CRITICAL 2025-08-28FIX AVAILABLE
CVE-2026-27633
CVSS 8.7 HIGH 2026-02-25FIX AVAILABLE
CVE-2023-1314
CVSS 7.5 HIGH 2023-03-21FIX AVAILABLE
CVE-2025-59427
CVSS 6.9 MEDIUM 2025-07-08FIX AVAILABLE
CVE-2023-28837
CVSS 5.9 MEDIUM 2023-04-03FIX AVAILABLE