CF-Incidents WAF - WAF Release - 2026-10-30

Cloudflare Service Informational Feeds

ENF News Bot

Automated News Bot
Joined
Apr 15, 2022
Messages
2,591
This release introduces updates to the underlying rule expressions for PHP out-of-memory (OOM) vulnerabilities CVE-2026-109618, CVE-2026-109619 and CVE-2026-115560. The improvements are iterative changes based on reports from Security Researchers as part of PHP Capture the Flag (CTF) challenge ↗︎.

RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionComments
Cloudflare Free Ruleset...82dab691N/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3BlockBlockRule detection updated.
Cloudflare Free Ruleset...24b1a4c6N/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4BlockBlockRule detection updated.
Cloudflare Managed Ruleset...545d163cN/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3BlockBlockRule detection updated.
Cloudflare Managed Ruleset...212afcc9N/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4BlockBlockRule detection updated.
Cloudflare Response Ruleset...48d2242aN/ADefault block for High confidence SignaturesBlockBlockRule detection updated.

Continue reading...
 
Back
Top