{
 "generated": "2026-11-02T01:30:20Z",
 "edition": "waf",
 "asof": "2026-11-02",
 "vendors": [
  {
   "id": "cloudflare",
   "name": "Cloudflare"
  },
  {
   "id": "aws",
   "name": "AWS WAF"
  },
  {
   "id": "crs",
   "name": "OWASP CRS"
  },
  {
   "id": "gcp",
   "name": "Google Cloud Armor"
  },
  {
   "id": "azure",
   "name": "Azure WAF"
  },
  {
   "id": "akamai",
   "name": "Akamai"
  },
  {
   "id": "imperva",
   "name": "Imperva"
  },
  {
   "id": "wafcharm",
   "name": "WafCharm"
  }
 ],
 "vendor_table": [
  {
   "v": "cloudflare",
   "name": "Cloudflare",
   "last": "2026-10-30",
   "ver": "2026-10-30",
   "lt": "WAF - WAF Release - 2026-10-30",
   "lu": "https://developers.cloudflare.com/changelog/post/2026-10-30-waf-release/",
   "n30": 17,
   "n90": 34,
   "gap": 4,
   "k": [
    "cve_coverage",
    "release",
    "rules_update"
   ]
  },
  {
   "v": "aws",
   "name": "AWS WAF",
   "last": "2026-10-22",
   "ver": "2.5",
   "lt": "PHP application managed rule group : Released static version 2.5 of this rule group.",
   "lu": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html#2026-10-22-5c784981fd",
   "n30": 4,
   "n90": 7,
   "gap": 13,
   "k": [
    "rules_update"
   ]
  },
  {
   "v": "crs",
   "name": "OWASP CRS",
   "last": "2026-10-02",
   "ver": "4.25.2",
   "lt": "v4.25.2 (LTS)",
   "lu": "https://github.com/coreruleset/coreruleset/releases/tag/v4.25.2",
   "n30": 0,
   "n90": 3,
   "gap": 46,
   "k": [
    "rules_update"
   ]
  },
  {
   "v": "gcp",
   "name": "Google Cloud Armor",
   "last": "2026-10-27",
   "ver": "",
   "lt": "Cloud Armor release notes: October 27, 2026",
   "lu": "https://docs.cloud.google.com/armor/docs/release-notes#October_27_2026",
   "n30": 3,
   "n90": 6,
   "gap": 14,
   "k": [
    "release"
   ]
  },
  {
   "v": "azure",
   "name": "Azure WAF",
   "last": "2026-10-29",
   "ver": "",
   "lt": "[Launched] Generally Available: HTTP DDoS ruleset for Azure Front Door Premium WAF",
   "lu": "https://azure.microsoft.com/updates?id=578681",
   "n30": 5,
   "n90": 8,
   "gap": 9,
   "k": [
    "release"
   ]
  },
  {
   "v": "akamai",
   "name": "Akamai",
   "last": "2026-10-08",
   "ver": "",
   "lt": "Manage and enforce script behavior rules with Client-Side Protection API",
   "lu": "https://techdocs.akamai.com/application-security/changelog/oct-8-2026-manage-and-enforce-script-behavior-rules-with-client-side-protection-api",
   "n30": 2,
   "n90": 3,
   "gap": 28,
   "k": [
    "release"
   ]
  },
  {
   "v": "imperva",
   "name": "Imperva",
   "last": "2026-10-22",
   "ver": "",
   "lt": "Node2Shell: From Brotli Data to Remote Code Execution",
   "lu": "https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/",
   "n30": 5,
   "n90": 8,
   "gap": 6,
   "k": [
    "cve_coverage"
   ]
  },
  {
   "v": "wafcharm",
   "name": "WafCharm",
   "last": "2026-10-27",
   "ver": "",
   "lt": "脆弱性「Node2Shell／HTTP2Shell」（CVE-2026-111497）の注意喚起および、WafCharmでの対応に関して",
   "lu": "https://www.wafcharm.com/jp/news/20261027-2/",
   "n30": 2,
   "n90": 2,
   "gap": 49,
   "k": [
    "cve_coverage"
   ]
  }
 ],
 "totals": {
  "n30": 38,
  "n90": 71,
  "vendors30": 7,
  "items_all": 351,
  "since": "2022-02-01"
 },
 "updates": [
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-30",
   "ver": "2026-10-30",
   "t": "WAF - WAF Release - 2026-10-30",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-30-waf-release/",
   "cve": [
    "CVE-2026-109618",
    "CVE-2026-109619",
    "CVE-2026-115560"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-30",
   "ver": "2026-10-30 Emergency",
   "t": "WAF - WAF Release - 2026-10-30 - Emergency",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-30-emergency-waf-release/",
   "cve": []
  },
  {
   "v": "azure",
   "k": "release",
   "d": "2026-10-29",
   "ver": "",
   "t": "[Launched] Generally Available: HTTP DDoS ruleset for Azure Front Door Premium WAF",
   "u": "https://azure.microsoft.com/updates?id=578681",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-28",
   "ver": "2026-10-28",
   "t": "WAF - WAF Release - 2026-10-28",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-28-waf-release/",
   "cve": [
    "CVE-2026-109618",
    "CVE-2026-109619",
    "CVE-2026-115560"
   ]
  },
  {
   "v": "gcp",
   "k": "release",
   "d": "2026-10-27",
   "ver": "",
   "t": "Cloud Armor release notes: October 27, 2026",
   "u": "https://docs.cloud.google.com/armor/docs/release-notes#October_27_2026",
   "cve": []
  },
  {
   "v": "wafcharm",
   "k": "cve_coverage",
   "d": "2026-10-27",
   "ver": "",
   "t": "脆弱性「Node2Shell／HTTP2Shell」（CVE-2026-111497）の注意喚起および、WafCharmでの対応に関して",
   "u": "https://www.wafcharm.com/jp/news/20261027-2/",
   "cve": [
    "CVE-2026-111497"
   ]
  },
  {
   "v": "cloudflare",
   "k": "cve_coverage",
   "d": "2026-10-27",
   "ver": "",
   "t": "Introducing the Cloudflare PHP Capture the Flag challenge",
   "u": "https://blog.cloudflare.com/php-ctf/",
   "cve": [
    "CVE-2026-109618",
    "CVE-2026-109619"
   ]
  },
  {
   "v": "azure",
   "k": "release",
   "d": "2026-10-27",
   "ver": "",
   "t": "[Launched] Generally Available: Azure Front Door profile and route level WAF policies",
   "u": "https://azure.microsoft.com/updates?id=578153",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-25",
   "ver": "2026-10-25 Emergency",
   "t": "WAF - WAF Release - 2026-10-25 - Emergency - Cloudflare Managed Ruleset",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-25-emergency-waf-release/",
   "cve": [
    "CVE-2026-111497"
   ]
  },
  {
   "v": "aws",
   "k": "rules_update",
   "d": "2026-10-22",
   "ver": "2.5",
   "t": "PHP application managed rule group : Released static version 2.5 of this rule group.",
   "u": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html#2026-10-22-5c784981fd",
   "cve": [
    "CVE-2026-109618",
    "CVE-2026-109619"
   ]
  },
  {
   "v": "imperva",
   "k": "cve_coverage",
   "d": "2026-10-22",
   "ver": "",
   "t": "Node2Shell: From Brotli Data to Remote Code Execution",
   "u": "https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/",
   "cve": [
    "CVE-2026-111497"
   ]
  },
  {
   "v": "imperva",
   "k": "cve_coverage",
   "d": "2026-10-22",
   "ver": "",
   "t": "PHP2Shell: Early Attack Activity Through Imperva’s Lens",
   "u": "https://www.imperva.com/blog/php2shell-early-attack-activity-through-impervas-lens/",
   "cve": [
    "CVE-2026-109618",
    "CVE-2026-109619"
   ]
  },
  {
   "v": "aws",
   "k": "rules_update",
   "d": "2026-10-22",
   "ver": "2.4",
   "t": "PHP application managed rule group : Released static version 2.4 of this rule group.",
   "u": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html#2026-10-22-1fe879a585",
   "cve": [
    "CVE-2026-109618"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-22",
   "ver": "2026-10-22 Emergency",
   "t": "WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Free Ruleset",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-22-emergency-waf-release-free/",
   "cve": [
    "CVE-2026-109618",
    "CVE-2026-109619"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-22",
   "ver": "2026-10-22 Emergency",
   "t": "WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Managed Ruleset",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-22-emergency-waf-release-cfmr/",
   "cve": [
    "CVE-2026-109618",
    "CVE-2026-109619"
   ]
  },
  {
   "v": "wafcharm",
   "k": "cve_coverage",
   "d": "2026-10-22",
   "ver": "",
   "t": "PHPの重大な脆弱性「php2shell」（CVE-2026-109618、CVE-2026-109619）の注意喚起および、WafCharmでの対応に関して",
   "u": "https://www.wafcharm.com/jp/news/20261022-1/",
   "cve": [
    "CVE-2026-109618",
    "CVE-2026-109619"
   ]
  },
  {
   "v": "aws",
   "k": "rules_update",
   "d": "2026-10-21",
   "ver": "2.3",
   "t": "PHP application managed rule group : Released static version 2.3 of this rule group.",
   "u": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html#2026-10-21-1c14d4bcce",
   "cve": [
    "CVE-2026-109619",
    "CVE-2026-109618"
   ]
  },
  {
   "v": "imperva",
   "k": "cve_coverage",
   "d": "2026-10-21",
   "ver": "",
   "t": "PHP2Shell: When PHP Runs Out of Memory at the Wrong Moment",
   "u": "https://www.imperva.com/blog/php2shell-vulnerability-updates/",
   "cve": [
    "CVE-2026-109618",
    "CVE-2026-109619"
   ]
  },
  {
   "v": "cloudflare",
   "k": "cve_coverage",
   "d": "2026-10-21",
   "ver": "",
   "t": "Cloudflare deploys protections against php2shell vulnerability",
   "u": "https://blog.cloudflare.com/php-vulnerabilities-waf-protection/",
   "cve": [
    "CVE-2026-115560",
    "CVE-2026-109618",
    "CVE-2026-109619",
    "CVE-2026-10961"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-21",
   "ver": "2026-10-21 Emergency",
   "t": "WAF - WAF Release - 2026-10-21 - Emergency - Cloudflare Free Ruleset",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-21-emergency-waf-release-free/",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-21",
   "ver": "2026-10-21 Emergency",
   "t": "WAF - WAF Release - 2026-10-21 - Emergency - Cloudflare Managed Ruleset",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-21-emergency-waf-release-cfmr/",
   "cve": []
  },
  {
   "v": "azure",
   "k": "release",
   "d": "2026-10-20",
   "ver": "",
   "t": "[Launched] Generally Available: Service tag match condition for Azure Front Door Premium WAF",
   "u": "https://azure.microsoft.com/updates?id=577156",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "cve_coverage",
   "d": "2026-10-19",
   "ver": "",
   "t": "Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities",
   "u": "https://blog.cloudflare.com/protect-your-netscaler-gateway/",
   "cve": [
    "CVE-2026-88771",
    "CVE-2026-88772"
   ]
  },
  {
   "v": "gcp",
   "k": "release",
   "d": "2026-10-19",
   "ver": "",
   "t": "Cloud Armor release notes: October 19, 2026",
   "u": "https://docs.cloud.google.com/armor/docs/release-notes#October_19_2026",
   "cve": []
  },
  {
   "v": "aws",
   "k": "rules_update",
   "d": "2026-10-15",
   "ver": "7.0",
   "t": "AWS WAF Bot Control rule group: Released static version 7.0 of this rule group.",
   "u": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html#2026-10-15-5ef181c312",
   "cve": []
  },
  {
   "v": "gcp",
   "k": "release",
   "d": "2026-10-14",
   "ver": "",
   "t": "Cloud Armor release notes: October 14, 2026",
   "u": "https://docs.cloud.google.com/armor/docs/release-notes#October_14_2026",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-14",
   "ver": "2026-10-14 Emergency",
   "t": "WAF - WAF Release - 2026-10-14 - Emergency",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-14-emergency-waf-release/",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-12",
   "ver": "scheduled 2026-10-19",
   "t": "WAF - WAF Release - Scheduled changes for 2026-10-19",
   "u": "https://developers.cloudflare.com/changelog/post/scheduled-waf-release/",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-12",
   "ver": "2026-10-12",
   "t": "WAF - WAF Release - 2026-10-12",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-12-waf-release/",
   "cve": [
    "CVE-2026-102989",
    "CVE-2026-21589"
   ]
  },
  {
   "v": "cloudflare",
   "k": "release",
   "d": "2026-10-09",
   "ver": "",
   "t": "WAF, Rules - Failed detections field available in Rules",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-09-failed-detections/",
   "cve": []
  },
  {
   "v": "imperva",
   "k": "cve_coverage",
   "d": "2026-10-08",
   "ver": "",
   "t": "CVE-2026-21589: Critical Pre-Authentication File Read Affects Atlassian Data Center Products",
   "u": "https://www.imperva.com/blog/cve-2026-21589-critical-pre-authentication-file-read-affects-atlassian-data-center-products/",
   "cve": [
    "CVE-2026-21589"
   ]
  },
  {
   "v": "akamai",
   "k": "release",
   "d": "2026-10-08",
   "ver": "",
   "t": "Manage and enforce script behavior rules with Client-Side Protection API",
   "u": "https://techdocs.akamai.com/application-security/changelog/oct-8-2026-manage-and-enforce-script-behavior-rules-with-client-side-protection-api",
   "cve": []
  },
  {
   "v": "azure",
   "k": "release",
   "d": "2026-10-08",
   "ver": "",
   "t": "[Launched] Generally Available: Exceptions in WAF for Azure Application Gateway and Azure Front Door",
   "u": "https://azure.microsoft.com/updates?id=574343",
   "cve": []
  },
  {
   "v": "akamai",
   "k": "release",
   "d": "2026-10-07",
   "ver": "",
   "t": "Protect your LLMs with Firewall for AI API",
   "u": "https://techdocs.akamai.com/application-security/changelog/oct-7-2026-firewall-for-ai-api",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "release",
   "d": "2026-10-07",
   "ver": "",
   "t": "WAF - Updated unsafe topic detection for AI Security for Apps",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-07-ai-security-for-apps-unsafe-topic-detection/",
   "cve": []
  },
  {
   "v": "imperva",
   "k": "cve_coverage",
   "d": "2026-10-06",
   "ver": "",
   "t": "The Hidden DoS Vector in SQL Parsers",
   "u": "https://www.imperva.com/blog/the-hidden-dos-vector-in-sql-parsers/",
   "cve": [
    "CVE-2026-46373",
    "CVE-2026-46374"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-06",
   "ver": "2026-10-06",
   "t": "WAF - WAF Release - 2026-10-06",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-06-waf-release/",
   "cve": [
    "CVE-2026-94127",
    "CVE-2026-94543"
   ]
  },
  {
   "v": "azure",
   "k": "release",
   "d": "2026-10-05",
   "ver": "",
   "t": "[In preview] Public Preview: IPv6 Support for Application Gateway WAF",
   "u": "https://azure.microsoft.com/updates?id=573861",
   "cve": []
  },
  {
   "v": "crs",
   "k": "rules_update",
   "d": "2026-10-02",
   "ver": "4.25.2",
   "t": "v4.25.2 (LTS)",
   "u": "https://github.com/coreruleset/coreruleset/releases/tag/v4.25.2",
   "cve": [
    "CVE-2014-6271"
   ]
  },
  {
   "v": "crs",
   "k": "rules_update",
   "d": "2026-10-02",
   "ver": "4.30.0",
   "t": "v4.30.0",
   "u": "https://github.com/coreruleset/coreruleset/releases/tag/v4.30.0",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-10-01",
   "ver": "2026-10-01 Emergency",
   "t": "WAF - WAF Release - 2026-10-01 - Emergency",
   "u": "https://developers.cloudflare.com/changelog/post/2026-10-01-emergency-waf-release/",
   "cve": [
    "CVE-2026-88771"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-09-30",
   "ver": "2026-09-30",
   "t": "WAF - WAF Release - 2026-09-30",
   "u": "https://developers.cloudflare.com/changelog/post/2026-09-30-waf-release/",
   "cve": [
    "CVE-2026-85706"
   ]
  },
  {
   "v": "imperva",
   "k": "cve_coverage",
   "d": "2026-09-28",
   "ver": "",
   "t": "New Remote DoS Attacks Against GraphQL Java",
   "u": "https://www.imperva.com/blog/new-remote-dos-attacks-against-graphql-java/",
   "cve": [
    "CVE-2026-23864"
   ]
  },
  {
   "v": "imperva",
   "k": "cve_coverage",
   "d": "2026-09-25",
   "ver": "",
   "t": "From Debugging to Code Execution: RCE in Microsoft DevLabs’ DebugMCP?",
   "u": "https://www.imperva.com/blog/from-debugging-to-code-execution-rce-in-microsoft-devlabs-debugmcp/",
   "cve": [
    "CVE-2025-66414",
    "CVE-2025-53967"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-09-25",
   "ver": "2026-09-25 Emergency",
   "t": "WAF - WAF Release - 2026-09-25 - Emergency",
   "u": "https://developers.cloudflare.com/changelog/post/2026-09-25-emergency-waf-release/",
   "cve": [
    "CVE-2026-87902",
    "CVE-2026-42018",
    "CVE-2026-82329"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-09-22",
   "ver": "2026-09-22",
   "t": "WAF - WAF Release - 2026-09-22",
   "u": "https://developers.cloudflare.com/changelog/post/2026-09-22-waf-release/",
   "cve": []
  },
  {
   "v": "gcp",
   "k": "release",
   "d": "2026-09-17",
   "ver": "",
   "t": "Cloud Armor release notes: September 17, 2026",
   "u": "https://docs.cloud.google.com/armor/docs/release-notes#September_17_2026",
   "cve": []
  },
  {
   "v": "aws",
   "k": "rules_update",
   "d": "2026-09-16",
   "ver": "2.5",
   "t": "SQL database managed rule group : Released static version 2.5 of this rule group.",
   "u": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html#2026-09-16-71ed826e77",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-09-15",
   "ver": "2026-09-15",
   "t": "WAF - WAF Release - 2026-09-15",
   "u": "https://developers.cloudflare.com/changelog/post/2026-09-15-waf-release/",
   "cve": []
  },
  {
   "v": "imperva",
   "k": "cve_coverage",
   "d": "2026-09-10",
   "ver": "",
   "t": "Imperva Customers Protected Against StyleSmuggler (CVE-2026-75650) in Adobe Commerce and Magento Open Source",
   "u": "https://www.imperva.com/blog/imperva-customers-protected-against-stylesmuggler-cve-2026-75650-in-adobe-commerce-and-magento-open-source/",
   "cve": [
    "CVE-2026-75650"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-09-10",
   "ver": "2026-09-10 Emergency",
   "t": "WAF - WAF Release - 2026-09-10 - Emergency",
   "u": "https://developers.cloudflare.com/changelog/post/2026-09-10-emergency-waf-release/",
   "cve": [
    "CVE-2026-75650"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-09-08",
   "ver": "2026-09-08",
   "t": "WAF - WAF Release - 2026-09-08",
   "u": "https://developers.cloudflare.com/changelog/post/2026-09-08-waf-release/",
   "cve": [
    "CVE-2026-75604"
   ]
  },
  {
   "v": "cloudflare",
   "k": "release",
   "d": "2026-09-07",
   "ver": "",
   "t": "WAF - Attack Signature Detection is now available in Early Access",
   "u": "https://developers.cloudflare.com/changelog/post/2026-09-07-attack-signature-detection/",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "release",
   "d": "2026-09-07",
   "ver": "",
   "t": "WAF - Enforce positive security with Application Profiles",
   "u": "https://developers.cloudflare.com/changelog/post/2026-09-07-application-profiles/",
   "cve": []
  },
  {
   "v": "azure",
   "k": "release",
   "d": "2026-09-02",
   "ver": "",
   "t": "[In preview] Public Preview: Azure Front Door profile and route level WAF policies",
   "u": "https://azure.microsoft.com/updates?id=569804",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-09-01",
   "ver": "2026-09-01",
   "t": "WAF - WAF Release - 2026-09-01",
   "u": "https://developers.cloudflare.com/changelog/post/2026-09-01-waf-release/",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "release",
   "d": "2026-09-01",
   "ver": "",
   "t": "WAF - Updated PII detection for AI Security for Apps",
   "u": "https://developers.cloudflare.com/changelog/post/2026-09-01-ai-security-for-apps-pii-detection/",
   "cve": []
  },
  {
   "v": "aws",
   "k": "rules_update",
   "d": "2026-08-28",
   "ver": "1.23",
   "t": "Core rule set (CRS) managed rule group : Released static version 1.23 of this rule group.",
   "u": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html#2026-08-28-b0e2203067",
   "cve": []
  },
  {
   "v": "gcp",
   "k": "release",
   "d": "2026-08-27",
   "ver": "",
   "t": "Cloud Armor release notes: August 27, 2026",
   "u": "https://docs.cloud.google.com/armor/docs/release-notes#August_27_2026",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-08-26",
   "ver": "2026-08-26 Emergency",
   "t": "WAF - WAF Release - 2026-08-26 - Emergency",
   "u": "https://developers.cloudflare.com/changelog/post/2026-08-26-emergency-waf-release/",
   "cve": [
    "CVE-2026-75604"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-08-25",
   "ver": "2026-08-25",
   "t": "WAF - WAF Release - 2026-08-25",
   "u": "https://developers.cloudflare.com/changelog/post/2026-08-25-waf-release/",
   "cve": []
  },
  {
   "v": "azure",
   "k": "release",
   "d": "2026-08-24",
   "ver": "",
   "t": "[Launched] Generally Available: Custom block response code and body for Application Gateway WAF",
   "u": "https://azure.microsoft.com/updates?id=569504",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "release",
   "d": "2026-08-20",
   "ver": "",
   "t": "WAF - Leaked credentials detection now scans Authorization headers",
   "u": "https://developers.cloudflare.com/changelog/post/2026-08-20-leaked-credentials-authorization-header/",
   "cve": []
  },
  {
   "v": "gcp",
   "k": "release",
   "d": "2026-08-19",
   "ver": "",
   "t": "Cloud Armor release notes: August 19, 2026",
   "u": "https://docs.cloud.google.com/armor/docs/release-notes#August_19_2026",
   "cve": []
  },
  {
   "v": "crs",
   "k": "rules_update",
   "d": "2026-08-17",
   "ver": "4.29.0",
   "t": "v4.29.0",
   "u": "https://github.com/coreruleset/coreruleset/releases/tag/v4.29.0",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-08-17",
   "ver": "2026-08-17",
   "t": "WAF - WAF Release - 2026-08-17",
   "u": "https://developers.cloudflare.com/changelog/post/2026-08-17-waf-release/",
   "cve": [
    "CVE-2026-65640"
   ]
  },
  {
   "v": "akamai",
   "k": "release",
   "d": "2026-08-13",
   "ver": "",
   "t": "AI-powered WAF detections",
   "u": "https://techdocs.akamai.com/application-security/changelog/aug-13-2026-ai-powered-waf-detections",
   "cve": []
  },
  {
   "v": "azure",
   "k": "release",
   "d": "2026-08-12",
   "ver": "",
   "t": "[Launched] Generally Available: Batch rule updates for Azure Front Door",
   "u": "https://azure.microsoft.com/updates?id=569246",
   "cve": []
  },
  {
   "v": "aws",
   "k": "rules_update",
   "d": "2026-08-12",
   "ver": "2.4",
   "t": "SQL database managed rule group : Released static version 2.4 of this rule group.",
   "u": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html#2026-08-12-088c6e8dd8",
   "cve": []
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-08-11",
   "ver": "2026-08-11",
   "t": "WAF - WAF Release - 2026-08-11",
   "u": "https://developers.cloudflare.com/changelog/post/2026-08-11-waf-release/",
   "cve": [
    "CVE-2026-61511",
    "CVE-2019-17132"
   ]
  },
  {
   "v": "cloudflare",
   "k": "rules_update",
   "d": "2026-08-07",
   "ver": "2026-08-07",
   "t": "WAF - WAF Release - 2026-08-07",
   "u": "https://developers.cloudflare.com/changelog/post/2026-08-07-waf-release/",
   "cve": [
    "CVE-2026-64638"
   ]
  }
 ],
 "coverage": {
  "targets": 113,
  "kev90": 106,
  "radar_only": 7,
  "radar_obs": 8,
  "any": 17,
  "per_vendor": {
   "cloudflare": 17,
   "aws": 2,
   "crs": 1,
   "gcp": 1,
   "azure": 0,
   "akamai": 0,
   "imperva": 5,
   "wafcharm": 5
  },
  "rows": [
   {
    "c": "CVE-2026-118527",
    "added": "2026-10-30",
    "p": "Ivanti Connect Secure",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-111357",
    "added": "2026-10-30",
    "p": "Ivanti Connect Secure",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-97229",
    "added": "2026-10-29",
    "p": "GitLab Community Edition and Enterprise Edition",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-76418",
    "added": "2026-10-29",
    "p": "Cisco Secure Firewall ASA Software and Cisco Secure FTD Software",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-46300",
    "added": "2026-10-28",
    "p": "Linux Kernel",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-41709",
    "added": "2026-10-28",
    "p": "Broadcom VMware ESX",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-48356",
    "added": "2026-10-27",
    "p": "Adobe Commerce and Magento",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-111497",
    "added": "2026-10-27",
    "p": "Google Brotli",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-10-25",
      "u": "https://developers.cloudflare.com/changelog/post/2026-10-25-emergency-waf-release/",
      "t": "WAF - WAF Release - 2026-10-25 - Emergency - Cloudflare Managed Ruleset"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": {
      "d": "2026-10-22",
      "u": "https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/",
      "t": "Node2Shell: From Brotli Data to Remote Code Execution"
     },
     "wafcharm": {
      "d": "2026-10-27",
      "u": "https://www.wafcharm.com/jp/news/20261027-2/",
      "t": "脆弱性「Node2Shell／HTTP2Shell」（CVE-2026-111497）の注意喚起および、WafCharmでの対応に関して"
     }
    }
   },
   {
    "c": "CVE-2026-109619",
    "added": "2026-10-26",
    "p": "PHP Group PHP",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-10-21",
      "u": "https://blog.cloudflare.com/php-vulnerabilities-waf-protection/",
      "t": "Cloudflare deploys protections against php2shell vulnerability"
     },
     "aws": {
      "d": "2026-10-21",
      "u": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html#2026-10-21-1c14d4bcce",
      "t": "PHP application managed rule group : Released static version 2.3 of this rule group."
     },
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": {
      "d": "2026-10-21",
      "u": "https://www.imperva.com/blog/php2shell-vulnerability-updates/",
      "t": "PHP2Shell: When PHP Runs Out of Memory at the Wrong Moment"
     },
     "wafcharm": {
      "d": "2026-10-22",
      "u": "https://www.wafcharm.com/jp/news/20261022-1/",
      "t": "PHPの重大な脆弱性「php2shell」（CVE-2026-109618、CVE-2026-109619）の注意喚起および、WafCharmでの対応に関して"
     }
    }
   },
   {
    "c": "CVE-2026-109618",
    "added": "2026-10-26",
    "p": "PHP Group PHP",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-10-21",
      "u": "https://blog.cloudflare.com/php-vulnerabilities-waf-protection/",
      "t": "Cloudflare deploys protections against php2shell vulnerability"
     },
     "aws": {
      "d": "2026-10-21",
      "u": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html#2026-10-21-1c14d4bcce",
      "t": "PHP application managed rule group : Released static version 2.3 of this rule group."
     },
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": {
      "d": "2026-10-21",
      "u": "https://www.imperva.com/blog/php2shell-vulnerability-updates/",
      "t": "PHP2Shell: When PHP Runs Out of Memory at the Wrong Moment"
     },
     "wafcharm": {
      "d": "2026-10-22",
      "u": "https://www.wafcharm.com/jp/news/20261022-1/",
      "t": "PHPの重大な脆弱性「php2shell」（CVE-2026-109618、CVE-2026-109619）の注意喚起および、WafCharmでの対応に関して"
     }
    }
   },
   {
    "c": "CVE-2026-114625",
    "added": "2026-10-23",
    "p": "Arista VeloCloud Orchestrator",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-110447",
    "added": "2026-10-23",
    "p": "Collabora Collabora Online – Built-in CODE Server",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-96656",
    "added": "2026-10-20",
    "p": "Plex Media Server",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-96655",
    "added": "2026-10-20",
    "p": "Plex Media Server",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-96654",
    "added": "2026-10-20",
    "p": "Plex Media Server",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-96652",
    "added": "2026-10-20",
    "p": "Plex Media Server",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-110936",
    "added": "2026-10-20",
    "p": "Siemens Software Center",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-106931",
    "added": "2026-10-20",
    "p": "EG Secure Solutions SiteGuard Server Edition",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-102764",
    "added": "2026-10-16",
    "p": "BeyondTrust Remote Support",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2025-61624",
    "added": "2026-10-16",
    "p": "Fortinet Multiple Products",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-21589",
    "added": "2026-10-15",
    "p": "Atlassian Multiple Products",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-10-12",
      "u": "https://developers.cloudflare.com/changelog/post/2026-10-12-waf-release/",
      "t": "WAF - WAF Release - 2026-10-12"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": {
      "d": "2026-10-08",
      "u": "https://www.imperva.com/blog/cve-2026-21589-critical-pre-authentication-file-read-affects-atlassian-data-center-products/",
      "t": "CVE-2026-21589: Critical Pre-Authentication File Read Affects Atlassian Data Center Products"
     },
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-76519",
    "added": "2026-10-14",
    "p": "Cisco Secure Email Gateway",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-105134",
    "added": "2026-10-14",
    "p": "Ahsay AhsayCBS",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-105133",
    "added": "2026-10-14",
    "p": "Ahsay AhsayCBS",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-0322",
    "added": "2026-10-14",
    "p": "Palo Alto Networks PAN-OS",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-96951",
    "added": "2026-10-13",
    "p": "Microsoft Windows",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-104935",
    "added": "2026-10-13",
    "p": "Ivanti Connect Secure",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2023-22894",
    "added": "2026-10-08",
    "p": "Strapi Strapi",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2021-3199",
    "added": "2026-10-08",
    "p": "ONLYOFFICE Docs",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2016-3081",
    "added": "2026-10-08",
    "p": "Apache Struts",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2015-5477",
    "added": "2026-10-08",
    "p": "ISC BIND",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2015-3306",
    "added": "2026-10-08",
    "p": "ProFTPD ProFTPD",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-88779",
    "added": "2026-10-04",
    "p": "Citrix NetScaler",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-102490",
    "added": "2026-10-02",
    "p": "Zammad GmbH Zammad",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-102489",
    "added": "2026-10-02",
    "p": "Zammad GmbH Zammad",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-104286",
    "added": "2026-10-01",
    "p": "Fortinet FortiMail",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-76504",
    "added": "2026-09-30",
    "p": "Cisco Catalyst SD-WAN Manager",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-86950",
    "added": "2026-09-29",
    "p": "Apple Multiple Products",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-88772",
    "added": "2026-09-27",
    "p": "Citrix NetScaler",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-10-19",
      "u": "https://blog.cloudflare.com/protect-your-netscaler-gateway/",
      "t": "Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-88771",
    "added": "2026-09-27",
    "p": "Citrix NetScaler",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-10-01",
      "u": "https://developers.cloudflare.com/changelog/post/2026-10-01-emergency-waf-release/",
      "t": "WAF - WAF Release - 2026-10-01 - Emergency"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-87902",
    "added": "2026-09-25",
    "p": "WordPress Core",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-09-25",
      "u": "https://developers.cloudflare.com/changelog/post/2026-09-25-emergency-waf-release/",
      "t": "WAF - WAF Release - 2026-09-25 - Emergency"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-67279",
    "added": "2026-09-25",
    "p": "MikroTik RouterOS",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-65660",
    "added": "2026-09-25",
    "p": "Microsoft SharePoint",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-71362",
    "added": "2026-09-24",
    "p": "Adobe Commerce and Magento",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-5430",
    "added": "2026-09-24",
    "p": "WSO2 Multiple Products",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-94127",
    "added": "2026-09-22",
    "p": "F5 BIG-IP APM",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-10-06",
      "u": "https://developers.cloudflare.com/changelog/post/2026-10-06-waf-release/",
      "t": "WAF - WAF Release - 2026-10-06"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-93952",
    "added": "2026-09-22",
    "p": "Arista VeloCloud Orchestrator",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-93616",
    "added": "2026-09-22",
    "p": "Check Point Multiple Products",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-85102",
    "added": "2026-09-22",
    "p": "Check Point Multiple Products",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-7273",
    "added": "2026-09-21",
    "p": "Zyxel GS1900 Series Switches",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-53266",
    "added": "2026-09-18",
    "p": "Linux Kernel",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2025-39964",
    "added": "2026-09-18",
    "p": "Linux Kernel",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2025-39682",
    "added": "2026-09-18",
    "p": "Linux Kernel",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-87886",
    "added": "2026-09-16",
    "p": "Acronis Backup",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-76460",
    "added": "2026-09-16",
    "p": "Cisco Identity Services Engine",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-58704",
    "added": "2026-09-16",
    "p": "Google Pixel",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-76461",
    "added": "2026-09-14",
    "p": "Cisco Secure Email Gateway",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-85706",
    "added": "2026-09-11",
    "p": "GitLab Community Edition and Enterprise Edition",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-09-30",
      "u": "https://developers.cloudflare.com/changelog/post/2026-09-30-waf-release/",
      "t": "WAF - WAF Release - 2026-09-30"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-84869",
    "added": "2026-09-11",
    "p": "ConnectWise ScreenConnect",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-42018",
    "added": "2026-09-11",
    "p": "JFrog Artifactory",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-09-25",
      "u": "https://developers.cloudflare.com/changelog/post/2026-09-25-emergency-waf-release/",
      "t": "WAF - WAF Release - 2026-09-25 - Emergency"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-42016",
    "added": "2026-09-11",
    "p": "JFrog Artifactory",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-86060",
    "added": "2026-09-10",
    "p": "MikroTik RouterOS",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-67277",
    "added": "2026-09-10",
    "p": "MikroTik RouterOS",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-87491",
    "added": "2026-09-09",
    "p": "Google Chromium V8",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-20079",
    "added": "2026-09-09",
    "p": "Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC)…",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-04-15",
      "u": "https://developers.cloudflare.com/changelog/post/2026-04-15-waf-release/",
      "t": "WAF - WAF Release - 2026-04-15"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-19490",
    "added": "2026-09-09",
    "p": "Citrix NetScaler",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2025-25249",
    "added": "2026-09-09",
    "p": "Fortinet Multiple Products",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-86218",
    "added": "2026-09-08",
    "p": "N-able N-central",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-85880",
    "added": "2026-09-08",
    "p": "Microsoft Windows",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-81963",
    "added": "2026-09-08",
    "p": "Microsoft Windows",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-75650",
    "added": "2026-09-08",
    "p": "Adobe Commerce and Magento",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-09-10",
      "u": "https://developers.cloudflare.com/changelog/post/2026-09-10-emergency-waf-release/",
      "t": "WAF - WAF Release - 2026-09-10 - Emergency"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": {
      "d": "2026-09-10",
      "u": "https://www.imperva.com/blog/imperva-customers-protected-against-stylesmuggler-cve-2026-75650-in-adobe-commerce-and-magento-open-source/",
      "t": "Imperva Customers Protected Against StyleSmuggler (CVE-2026-75650) in Adobe Commerce and Magento Ope"
     },
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-85046",
    "added": "2026-09-04",
    "p": "Google Chromium V8",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-9586",
    "added": "2026-09-02",
    "p": "Sangoma Switchvox",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-83549",
    "added": "2026-09-02",
    "p": "SonicWall SMA1000 Appliances",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-83548",
    "added": "2026-09-02",
    "p": "SonicWall SMA1000 Appliances",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-82329",
    "added": "2026-09-02",
    "p": "JFrog Artifactory",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-09-25",
      "u": "https://developers.cloudflare.com/changelog/post/2026-09-25-emergency-waf-release/",
      "t": "WAF - WAF Release - 2026-09-25 - Emergency"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-59822",
    "added": "2026-09-02",
    "p": "BerriAI LiteLLM",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-49869",
    "added": "2026-09-02",
    "p": "Kestra Kestra OSS",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-48710",
    "added": "2026-09-02",
    "p": "Kludex Starlette",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-82078",
    "added": "2026-08-31",
    "p": "PaperCut NG/MF",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-81578",
    "added": "2026-08-31",
    "p": "PaperCut NG/MF",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-66384",
    "added": "2026-08-27",
    "p": "JFrog Artifactory",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-53362",
    "added": "2026-08-27",
    "p": "Linux Kernel",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2023-49105",
    "added": "2026-08-27",
    "p": "ownCloud ownCloud",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-8452",
    "added": "2026-08-26",
    "p": "Citrix NetScaler ADC and NetScaler Gateway",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2022-0995",
    "added": "2026-08-26",
    "p": "Linux Kernel",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2021-23758",
    "added": "2026-08-26",
    "p": "Ajax.NET Professional Ajax.NET Professional",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2019-1068",
    "added": "2026-08-26",
    "p": "Microsoft SQL Server",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2015-5287",
    "added": "2026-08-26",
    "p": "Red Hat Automatic Bug Reporting Tool",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2015-3246",
    "added": "2026-08-26",
    "p": "Red Hat Libuser",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-60004",
    "added": "2026-08-25",
    "p": "Gitea Gitea",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-21962",
    "added": "2026-08-24",
    "p": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-73570",
    "added": "2026-08-21",
    "p": "Synacor Zimbra Collaboration Suite (ZCS)",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-72530",
    "added": "2026-08-20",
    "p": "TrueConf Server",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-72529",
    "added": "2026-08-20",
    "p": "TrueConf Server",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-64849",
    "added": "2026-08-19",
    "p": "MLflow MLflow",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-65400",
    "added": "2026-08-18",
    "p": "Apple macOS",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-59310",
    "added": "2026-08-18",
    "p": "Broadcom VMware vCenter",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-55040",
    "added": "2026-08-18",
    "p": "Microsoft SharePoint",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-33824",
    "added": "2026-08-18",
    "p": "Microsoft Internet Key Exchange (IKE) Service Extensions",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2025-62593",
    "added": "2026-08-17",
    "p": "Ray-Project Ray",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-72898",
    "added": "2026-08-11",
    "p": "Metabase Metabase",
    "obs": [
     "jp"
    ],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-68820",
    "added": "2026-08-11",
    "p": "Microsoft Windows Ancillary Function Driver for WinSock",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-20349",
    "added": "2026-08-11",
    "p": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall…",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-8037",
    "added": "2026-08-07",
    "p": "Progress LoadMaster",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": {
      "d": "2026-07-14",
      "u": "https://developers.cloudflare.com/changelog/post/2026-07-14-waf-release/",
      "t": "WAF - WAF Release - 2026-07-14"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-63077",
    "added": "2026-08-05",
    "p": "JetBrains TeamCity",
    "obs": [],
    "src": "kev",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2026-63030",
    "added": "",
    "p": "",
    "obs": [
     "jp"
    ],
    "src": "radar",
    "cov": {
     "cloudflare": {
      "d": "2026-07-21",
      "u": "https://developers.cloudflare.com/changelog/post/2026-07-21-waf-release/",
      "t": "WAF - WAF Release - 2026-07-21"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": {
      "d": "2026-07-21",
      "u": "https://www.wafcharm.com/jp/news/20260721/",
      "t": "WordPress Coreの脆弱性「wp2shell」（CVE-2026-63030、CVE-2026-60137）に関する注意喚起とWafCharmでの対応について"
     }
    }
   },
   {
    "c": "CVE-2026-60137",
    "added": "",
    "p": "",
    "obs": [
     "jp"
    ],
    "src": "radar",
    "cov": {
     "cloudflare": {
      "d": "2026-07-21",
      "u": "https://developers.cloudflare.com/changelog/post/2026-07-21-waf-release/",
      "t": "WAF - WAF Release - 2026-07-21"
     },
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": {
      "d": "2026-07-21",
      "u": "https://www.wafcharm.com/jp/news/20260721/",
      "t": "WordPress Coreの脆弱性「wp2shell」（CVE-2026-63030、CVE-2026-60137）に関する注意喚起とWafCharmでの対応について"
     }
    }
   },
   {
    "c": "CVE-2025-55182",
    "added": "",
    "p": "",
    "obs": [
     "jp"
    ],
    "src": "radar",
    "cov": {
     "cloudflare": {
      "d": "2025-12-03",
      "u": "https://developers.cloudflare.com/changelog/post/2025-12-03-emergency-waf-release/",
      "t": "WAF - WAF Release - 2025-12-03 - Emergency"
     },
     "aws": null,
     "crs": {
      "d": "2026-01-05",
      "u": "https://github.com/coreruleset/coreruleset/releases/tag/v4.22.0",
      "t": "v4.22.0"
     },
     "gcp": {
      "d": "2025-12-03",
      "u": "https://docs.cloud.google.com/armor/docs/release-notes#December_03_2025",
      "t": "Cloud Armor release notes: December 03, 2025"
     },
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2024-4577",
    "added": "",
    "p": "",
    "obs": [
     "jp"
    ],
    "src": "radar",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2021-20837",
    "added": "",
    "p": "",
    "obs": [
     "jp"
    ],
    "src": "radar",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2021-20717",
    "added": "",
    "p": "",
    "obs": [
     "jp"
    ],
    "src": "radar",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   },
   {
    "c": "CVE-2017-5638",
    "added": "",
    "p": "",
    "obs": [
     "jp"
    ],
    "src": "radar",
    "cov": {
     "cloudflare": null,
     "aws": null,
     "crs": null,
     "gcp": null,
     "azure": null,
     "akamai": null,
     "imperva": null,
     "wafcharm": null
    }
   }
  ]
 },
 "sources": [
  {
   "v": "cloudflare",
   "name": "Cloudflare WAF managed rules change log + blog",
   "url": "https://developers.cloudflare.com/waf/change-log/",
   "ok": true,
   "how": "RSS (change log, blog)",
   "how_ja": "RSS(変更履歴・ブログ)",
   "note": "Rule releases back to 2025-01; blog posts only when they name a CVE ID and a WAF/protection word.",
   "note_ja": "ルール更新は 2025-01 まで。ブログは CVE ID と WAF/保護の語を含む投稿だけ。"
  },
  {
   "v": "aws",
   "name": "AWS Managed Rules changelog",
   "url": "https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-changelog.html",
   "ok": true,
   "how": "HTML table, one row per change",
   "how_ja": "HTML 表(変更 1 行ずつ)",
   "note": "Rule-group version and date; CVE IDs are rarely named.",
   "note_ja": "ルールグループの版と日付。CVE ID を名指しすることは少ない。"
  },
  {
   "v": "crs",
   "name": "OWASP CRS releases",
   "url": "https://github.com/coreruleset/coreruleset/releases",
   "ok": true,
   "how": "GitHub releases API (unauthenticated)",
   "how_ja": "GitHub releases API(認証なし)",
   "note": "Open-source rule set used by many WAFs.",
   "note_ja": "多くの WAF が使うオープンソースのルールセット。"
  },
  {
   "v": "gcp",
   "name": "Google Cloud Armor release notes",
   "url": "https://docs.cloud.google.com/armor/docs/release-notes",
   "ok": true,
   "how": "Atom feed",
   "how_ja": "Atom フィード",
   "note": "Product release notes; rarely CVE-level.",
   "note_ja": "製品のリリースノート。CVE 単位の記載は少ない。"
  },
  {
   "v": "azure",
   "name": "Azure service updates (WAF items)",
   "url": "https://azure.microsoft.com/updates/",
   "ok": true,
   "how": "RSS filtered by WAF / ruleset wording",
   "how_ja": "RSS を WAF・ルールセットの語で絞る",
   "note": "Feature and ruleset announcements; DRS versions are not itemised in the feed.",
   "note_ja": "機能・ルールセットの告知。DRS の版はフィードに個別には出ない。"
  },
  {
   "v": "akamai",
   "name": "Akamai Application Security changelog",
   "url": "https://techdocs.akamai.com/application-security/changelog",
   "ok": true,
   "how": "HTML list + Markdown of each entry",
   "how_ja": "HTML 一覧と各項目の Markdown",
   "note": "API and product notes; individual rule updates are not published here.",
   "note_ja": "API・製品の更新。個別のルール更新はここには載らない。"
  },
  {
   "v": "imperva",
   "name": "Imperva blog",
   "url": "https://www.imperva.com/blog/",
   "ok": true,
   "how": "RSS, posts naming a CVE ID",
   "how_ja": "RSS(CVE ID を名指しする投稿)",
   "note": "Blog posts only; the release-notes portal is rendered in the browser and cannot be read mechanically.",
   "note_ja": "ブログ投稿のみ。リリースノートのポータルはブラウザ描画で、機械的には読めない。"
  },
  {
   "v": "wafcharm",
   "name": "WafCharm news (vulnerability advisories)",
   "url": "https://www.wafcharm.com/jp/news/",
   "ok": true,
   "how": "HTML list, category 'vulnerability advisories'",
   "how_ja": "HTML 一覧(カテゴリ「脆弱性の注意喚起」)",
   "note": "Japanese advisories that state WafCharm's response.",
   "note_ja": "WafCharm の対応を述べる日本語の注意喚起。"
  },
  {
   "v": "kev",
   "name": "CISA Known Exploited Vulnerabilities",
   "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "ok": true,
   "how": "JSON catalogue",
   "how_ja": "JSON カタログ",
   "note": "Reference list of target CVEs (added in the last 90 days).",
   "note_ja": "対象 CVE の基準(直近 90 日に追加された分)。"
  },
  {
   "v": "fastly",
   "name": "Fastly documentation changes",
   "url": "https://docs.fastly.com/changes/",
   "ok": false,
   "how": "",
   "how_ja": "",
   "note": "Monthly roll-ups of every documentation change with no WAF-specific item; no rule-level feed.",
   "note_ja": "文書変更の月次まとめで、WAF 固有の項目がなく、ルール単位のフィードもない。"
  },
  {
   "v": "f5",
   "name": "F5 attack signature updates",
   "url": "",
   "ok": false,
   "how": "",
   "how_ja": "",
   "note": "The signature update notes sit behind a customer login.",
   "note_ja": "シグネチャ更新情報は顧客ログインの内側にある。"
  },
  {
   "v": "trend",
   "name": "Trend Micro IPS rule updates",
   "url": "",
   "ok": false,
   "how": "",
   "how_ja": "",
   "note": "No public, login-free, machine-readable rule-update feed was found.",
   "note_ja": "ログイン不要で機械的に読める公開のルール更新フィードが見つからなかった。"
  }
 ],
 "feeds_ok": 10,
 "feeds_n": 10,
 "method": {
  "sources": "Vendors' own public pages are read once a day (feeds where they exist, otherwise the page itself): the Cloudflare WAF change log, the AWS Managed Rules changelog, OWASP CRS releases, Google Cloud Armor release notes, Azure service updates that name WAF, the Akamai Application Security changelog, WafCharm vulnerability advisories, and Imperva and Cloudflare blog posts that name a CVE ID. Requests identify themselves, wait at least a second per host and follow robots.txt.",
  "inclusion": "An update is listed with the date and wording the vendor published; nothing is rewritten or scored. CVE IDs are taken only when they appear verbatim in the vendor's text.",
  "coverage": "The target CVEs are the CISA KEV entries added in the last 90 days plus CVEs named as exploited in the sister Breach Radars (Japan, US). A cell shows the earliest date on which a vendor text above names the CVE. A dash means no such text was found in the sources read; it does not mean the vendor lacks a rule, and a vendor can protect without naming the CVE.",
  "limits": "Vendors differ in how much they publish: Cloudflare names CVEs in nearly every release, AWS and Google rarely do, and some vendors (Fastly, F5, Trend Micro) publish nothing readable without a login. Counts compare how often vendors publish, not how well they protect. Blog posts and advisories describe a protection that may predate or follow the date shown.",
  "sources_ja": "各社が自ら公開しているページを日に 1 回読む(フィードがあればフィード、なければ頁そのもの)。Cloudflare の WAF 変更履歴、AWS Managed Rules の変更履歴、OWASP CRS のリリース、Google Cloud Armor のリリースノート、WAF に触れる Azure のサービス更新、Akamai Application Security の変更履歴、WafCharm の脆弱性注意喚起、CVE ID を挙げる Imperva と Cloudflare のブログ。取得は識別子つきで、1 ホスト 1 秒以上あけ、robots.txt に従う。",
  "inclusion_ja": "更新は、各社が公開した日付と文言のまま載せる。書き換えも採点もしない。CVE ID は、各社の本文に逐語で現れるものだけを取る。",
  "coverage_ja": "対象 CVE は、直近 90 日に CISA KEV に追加されたものと、姉妹の侵害レーダー(日本・米国)が悪用されたと名指しした CVE。セルは、上の各社の文面がその CVE を名指しした最も早い日付。ダッシュは「読んだ範囲に該当文面が無い」の意味で、ルールが無いという意味ではない。名指しせずに防御している場合もある。",
  "limits_ja": "公開の量は各社で違う。Cloudflare はほぼ毎回 CVE を名指しし、AWS と Google はまれにしか名指ししない。Fastly・F5・Trend Micro のようにログインなしでは読める情報が無い社もある。件数は公開の頻度の比較であって、防御の優劣ではない。ブログや注意喚起が述べる防御は、表示の日付より前または後のことがある。"
 }
}