CVE-2026-2836

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 9, 2026

Last Seen

March 10, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Cloudflare Pingora Vulnerabilities Enable Request Smuggling Attacks45.9

Cloudflare identified and patched HTTP/1.x request smuggling vulnerabilities in the Pingora open source framework. These vulnerabilities, reported through their Bug Bounty Program, are tracked as CVE-2026-2833, CVE-2026-2835, and CVE-2026-2836, all published on March 4, 2026. The vulnerabilities cou...