Cloudflare Workers AI · First-party API · LLM

CVE-2026-64638

CVE-2026-64638
Release announcedReleased on Aug 7, 2026

Cloudflare Workers AI released CVE-2026-64638 on Aug 7, 2026. Source: developers.cloudflare.com · Last checked Oct 29, 2026

Notice

Release announced

Released on Aug 7, 2026

Cloudflare Workers AI announced this model on 2026-08-07.

Hosting route
First-party API
Affected scope
Not stated in the notice
Announced
Aug 7, 2026
First seen by ModelClock
Oct 29, 2026

What the provider published

developers.cloudflare.com ↗

This release updates WordPress XSS rule metadata in the Cloudflare Managed Ruleset and Cloudflare Free Ruleset to identify XSS2Shell (CVE-2026-64638).

Read from the provider's text; the quote is the provider's exact lines.

Revision history

Loading…
Loading revision history…
Raw history JSON

Add a badge to your README

CVE-2026-64638 shutdown date

Shows this model's current status and follows new notices from the provider. Unknown models show “not tracked”, so a README never breaks.

Markdown
[![CVE-2026-64638 shutdown date](https://model-clock.com/badge/cloudflare-workers-ai/CVE-2026-64638.svg)](https://model-clock.com/models/cloudflare-workers-ai/CVE-2026-64638)
HTML
<a href="https://model-clock.com/models/cloudflare-workers-ai/CVE-2026-64638"><img src="https://model-clock.com/badge/cloudflare-workers-ai/CVE-2026-64638.svg" alt="CVE-2026-64638 shutdown date"></a>

Prefer Shields.io styles? Use the endpoint badge with https://model-clock.com/badge/cloudflare-workers-ai/CVE-2026-64638.json.