CVE-2026-10961

Vendor

Cloudflare, PHP

Product

Cloudflare WARP / Workers / Zero Trust, PHP

EPSS

1.00 (p100)

Exposure class

Cloud platform, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 34
   Research Cloudflare 10d ago

   Cloudflare deploys protections against php2shell vulnerability

   Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed…

   EPSS 1.00 CVE-2026-115560CVE-2026-109618CVE-2026-109619+1 more Cloudflare PHP