
Cloudflare Pingora Vulnerabilities Allows Request Smuggling & Cache Poisoning Attacks
Cloudflare has released version 0.8.0 of its open-source Pingora framework to patch three critical vulnerabilities: CVE-2026-2833, CVE-2026-2835, and CVE-2026-2836. These flaws allow HTTP request smuggling and cache poisoning, posing a severe threat to standalone Pingora deployments exposed directly to the internet. Cloudflare confirmed that its own Content Delivery Network (CDN) and customer traffic were completely […] The post Cloudflare Pingora Vulnerabilities Allows Request Smuggling & Cache Poisoning Attacks appeared first on Cyber Security News.