WAF – WAF Release – 2025-10-03

Managed Ruleset Updated

This update introduces 21 new detections in the Cloudflare Managed Ruleset (all currently set to Disabled mode to preserve remediation logic and allow quick activation if needed). The rules cover a broad spectrum of threats – SQL injection techniques, command and code injection, information disclosure of common files, URL anomalies, and cross-site scripting.

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Managed Ruleset	0d02c2fb14eb4cec9c2e2b58d61fac74	100902	Generic Rules – Command Execution – 2	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	c3079865ce9a41368657026b514aeeb8	100908	Generic Rules – Command Execution – 3	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	107ae2922b654bb28df7ca978d46a6f4	100910	Generic Rules – Command Execution – 4	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	68bdb75ae6d24e139a83e5731bd0a329	100915	Generic Rules – Command Execution – 5	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	ea04bb580f7d400386c7dc1d5e51450a	100899	Generic Rules – Content-Type Abuse	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	233364f656ff42b8acc41dcd7996012f	100914	Generic Rules – Content-Type Injection	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	1aa695281c954513be3d003b93209312	100911	Generic Rules – Cookie Header Injection	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	d9f9e4f5bf11489da52dccb40f373b3f	100905	Generic Rules – NoSQL Injection	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	5a1897b714e044a887c0f3f078a0ed04	100913	Generic Rules – NoSQL Injection – 2	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	4d6fd28df4f1494e95e70d2c5d649624	100907	Generic Rules – Parameter Pollution	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	61181e3af5304f7396c7d01cfd1c674e	100906	Generic Rules – PHP Object Injection	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	ed5190bfbe1b45a6a645126334c88168	100904	Generic Rules – Prototype Pollution	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	3ec33bc5ac77495a9f55020e3ab43f7e	100897	Generic Rules – Prototype Pollution 2	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	c6d752c4909e4b7e8eff6c780d94ee22	100903	Generic Rules – Reverse Shell	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	caf37e7800bb4635bcc2eefcd5add8e3	100909	Generic Rules – Reverse Shell – 2	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	475d090baead467c88dfabbb565c78b0	100898	Generic Rules – SSJI NoSQL	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	f4c7f98934264c9c937eec1212b837a0	100896	Generic Rules – SSRF	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	efd01b814d144e90b36522b311c4fb00	100895	Generic Rules – Template Injection	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	00a9a0d663da4add95b863abd3ed0123	100895A	Generic Rules – Template Injection – 2	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	e58c0fffee4f4374bd37f2577501a1d9	100912	Generic Rules – XXE	N/A	Disabled	This is a New Detection
Cloudflare Managed Ruleset	ab09ba8d00eb4cdbb7a6a65ddc55cdb6	100900	Relative Paths – Anomaly Headers	N/A	Disabled	This is a New Detection

Source: Cloudflare

Latest Posts