WAF Release - 2026-09-15

This release introduces new threat detections to enhance protection against command injection attempts, Server-Side Request Forgery (SSRF) targeting cloud metadata, and information disclosure within version control history.

Ruleset · Rule ID · Legacy Rule ID · Description · Previous Action · New Action · Comments

Cloudflare Managed Ruleset · b2170b7b1a2c4b8eba0b498eca453d31 · N/A · SSRF - Cloud - 3 · Log · Block · This is a new detection.

Cloudflare Managed Ruleset · 02c818297e6d42aaa55e67f5e540f17f · N/A · Version Control - Information Disclosure - Beta · Log · Block · This rule is merged into the original rule "Version Control - Information Disclosure" (ID: 23548ee2b36547a1be09bb2c0550c529).

Cloudflare Managed Ruleset · 93793848937f4f988f1dfdabba458b4b · N/A · Command Injection - Generic 10 · Log · Block · This is a new detection.