CF-Incidents WAF - WAF Release - 2026-10-23 - Emergency - Cloudflare Managed Ruleset

Cloudflare Service Informational Feeds

ENF News Bot

Automated News Bot
Joined
Apr 15, 2022
Messages
2,591
The existing PHP remote code execution rule in the Cloudflare Managed Ruleset covers CVE-2026-115560. This emergency release adds the CVE identifier to existing rule. Detection logic and rule actions remain unchanged.

RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionComments
Cloudflare Managed Ruleset...9d9c073dN/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560) #6BlockN/ARule metadata description refined. Detection unchanged.

For more information, refer to WAF Managed Rules.

Continue reading...
 
Back
Top