# Cloudflare in May 2025: incidents, uptime and changes

> Cloudflare in May 2025: 0 incidents on its status page (0 major or critical), 5 CVEs. From Rewindex’s archive of Cloudflare’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/cloudflare/2025/05
Last updated: 2026-06-17T09:33:43Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): — free of major/critical incidents, — free of any incident; outage time 0 min, incident time 0 min (partial month)
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 5
- Previous month: [January 2025](https://rewindex.com/company/cloudflare/2025/01.md) · Next: [June 2025](https://rewindex.com/company/cloudflare/2025/06.md) · [All months](https://rewindex.com/company/cloudflare/reports.md) · [Cloudflare](https://rewindex.com/company/cloudflare.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2025-4143](https://rewindex.com/cve/CVE-2025-4143.md) Missing validation of redirect\_uri on authorize endpoint (CVSS 6.1), published 2025-05-01
- [CVE-2025-4144](https://rewindex.com/cve/CVE-2025-4144.md) PKCE bypass via downgrade attack (CVSS 9.8), published 2025-05-01
- [CVE-2025-3757](https://rewindex.com/cve/CVE-2025-3757.md) Authentication Bypass in OpenPubKey (CVSS 9.8), published 2025-05-13
- [CVE-2025-4658](https://rewindex.com/cve/CVE-2025-4658.md) Authentication Bypass in OPKSSH (CVSS 9.8), published 2025-05-13
- [CVE-2025-4366](https://rewindex.com/cve/CVE-2025-4366.md) Request Smuggling Vulnerability in Pingora (CVSS 6.1), published 2025-05-22

## Cite this

Cloudflare posted 0 status incidents in May 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/cloudflare/2025/05
- Citation: Cloudflare, “Cloudflare in May 2025” (2025-05-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/cloudflare/2025/05 (CC BY 4.0).
- Markdown link: `[Cloudflare: Cloudflare in May 2025 (2025-05-01)](https://rewindex.com/company/cloudflare/2025/05)`


---
Canonical: https://rewindex.com/company/cloudflare/2025/05 · Markdown: https://rewindex.com/company/cloudflare/2025/05.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T16:04:02.052Z