CF-Changes WAF - WAF Release - 2026-10-23 - Emergency - Cloudflare Managed Ruleset

Cloudflare Reporting - Product Changelog

ENF News Bot

Automated News Bot
Joined
Apr 15, 2022
Messages
4,195
The existing PHP remote code execution rule in the Cloudflare Managed Ruleset covers CVE-2026-115560. This emergency release adds the CVE identifier to existing rule. Detection logic and rule actions remain unchanged.

RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionComments
Cloudflare Managed Ruleset...9d9c073dN/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560) #6BlockN/ARule metadata description refined. Detection unchanged.

For more information, refer to WAF Managed Rules.

Continue reading...
 
Back
Top