WAF – WAF Release – 2026-09-15

This release introduces new threat detections to enhance protection against command injection attempts, Server-Side Request Forgery (SSRF) targeting cloud metadata, and information disclosure within version control history.

Ruleset Rule ID Legacy Rule ID Description Previous Action New Action Comments
Cloudflare Managed Ruleset N/A SSRF – Cloud – 3 Log Block This is a new detection.
Cloudflare Managed Ruleset N/A Version Control – Information Disclosure – Beta Log Block This rule is merged into the original rule "Version Control – Information Disclosure" (ID: ).
Cloudflare Managed Ruleset N/A Command Injection – Generic 10 Log Block This is a new detection.

Source: Cloudflare

Share This Update