WAF – WAF Release – 2026-10-22 – Emergency – Cloudflare Managed Ruleset

WAF – WAF Release – 2026-10-22 – Emergency – Cloudflare Managed Ruleset

This emergency release updates the names and metadata of seven existing rules in the Cloudflare Managed Ruleset to identify CVE-2026-109618 and CVE-2026-109619. Detection logic and rule actions remain unchanged. RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare Managed Ruleset...c438d5ddN/APHP Remote Code Execution…