WAF

This week’s release introduces new detections for denial-of-service attempts targeting React (CVE-2026-23864). Key Findings CVE-2026-23864 is a denial-of-service vulnerability in React that enables an attacker to trigger service disruption. RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare Managed Rulesetaaede80b4d414dc89c443cea61680354 N/AReact Server -…

This week's release focuses on improvements to existing detections to enhance coverage. Key Findings Existing rule enhancements have been deployed to improve detection resilience against SQL injection. RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare Managed Ruleseta291bd530fa346d18cc1ce5a68d90c8f N/ASQLi - Comment - BetaLogBlockThis…

This week's release focuses on improvements to existing detections to enhance coverage. Key Findings Existing rule enhancements have been deployed to improve detection resilience against SQL Injection. RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare Managed Ruleseteb3f44c07266448b9fa54ee7ad7dad3e N/ASQLi - String Function -…

This week's release focuses on improvements to existing detections to enhance coverage. Key Findings Existing rule enhancements have been deployed to improve detection resilience against SQL Injection. RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare Managed Ruleset72963b917ef74697b5bde02f48a1841a N/ASQLi - AND/OR MAKE_SET/ELT -…

This week's release focuses on improvements to existing detections to enhance coverage. Key Findings Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage. RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare…

This emergency release introduces rules for CVE-2025-55183 and CVE-2025-55184, targeting server-side function exposure and resource-exhaustion patterns, respectively. Key Findings Added coverage for Leaking Server Functions (CVE-2025-55183) and React Function DoS detection (CVE-2025-55184). Impact These updates strengthen protection for server-function abuse…