WAF Release - 2026-03-23

This week's release focuses on new improvements to enhance coverage.

Key Findings

• Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage.

Ruleset · Rule ID · Legacy Rule ID · Description · Previous Action · New Action · Comments

Cloudflare Managed Ruleset · 54ad0465c30d4cd2ac7a707197321c6c · N/A · Command Injection - Generic 9 - URI Vector · Log · Disabled · This is a new detection.

Cloudflare Managed Ruleset · b31c34a7b29b4aaf9be6883d1eb7a999

N/A · Command Injection - Generic 9 - Header Vector · Log · Disabled

This is a new detection.

Cloudflare Managed Ruleset · 155bb67d1061479e995a38510677175f

N/A · Command Injection - Generic 9 - Body Vector · Log · Disabled

This is a new detection.

Cloudflare Managed Ruleset · 55fb1c76f0304f6a9d935d03479da68f · N/A · PHP, vBulletin, jQuery File Upload - Code Injection, Dangerous File Upload - CVE:CVE-2018-9206, CVE:CVE-2019-17132 (beta) · Log · Block · This rule has been merged into the original rule "PHP, vBulletin, jQuery File Upload - Code Injection, Dangerous File Upload - CVE:CVE-2018-9206, CVE:CVE-2019-17132" (ID: 0f2da91cec674eb58006929e824b817c)