Skip to content
Threat Feed
Subscribe

Tag

Cloudflare

3 briefs RSS
high advisory

OpenNext Cloudflare Middleware Bypass via Cache Interception

The @opennextjs/cloudflare component contains a vulnerability (CVE-2026-100409) where inconsistent path decoding allows attackers to bypass middleware-based authorization and retrieve cached content.

@opennextjs/cloudflare web-application middleware-bypass cloudflare cve-2026-100409
1t 1c
medium advisory

Potential Protocol Tunneling via Cloudflared

Adversaries may abuse Cloudflare Tunnel (cloudflared) on Windows systems to proxy command and control traffic or exfiltrate data through Cloudflare's edge, evading direct connection blocking.

M365 Defender +1 cloudflare tunneling command and control proxy
2r 2t 1i
high advisory

Potential Abuse of Cloudflare Tunnels via Cloudflared

Attackers are increasingly abusing Cloudflare tunnels, created via the cloudflared client, for establishing stealthy command and control channels and evading network defenses by proxying traffic through Cloudflare's infrastructure.

Cloudflared +3 cloudflare reverse-proxy tunnel command-and-control
2r 2t