WAF Release - 2026-09-30

This release introduces new detections to enhance protection against a specific GitLab path traversal vulnerability, alongside advanced generic rules targeting HTTP request smuggling, directory traversal, and command injection attempts.

Key Findings

• CVE-2026-85706: A path traversal vulnerability affecting GitLab.

Ruleset · Rule ID · Legacy Rule ID · Description · Previous Action · New Action · Comments

Cloudflare Managed Ruleset · f2445b9131214302a11477a2cb14ded8 · N/A · Broken Access Control - Directory Traversal · Log · Block · This is a new detection.

Cloudflare Managed Ruleset · 5c1ba1fdb0a742d4beaaefd00364bd7e · N/A · HTTP Request Smuggling - Request Body Anomaly - Beta · Log · Block · This rule is merged into the original rule "HTTP/2 Request Smuggling - Request Body Anomaly" (ID: a80f214f0947435dabb2ba2d1489d892).

Cloudflare Managed Ruleset · 09055ff9f80046419a3c0be5d498a69a · N/A · Command Injection - Generic 8 - body - Beta · Disabled · Disabled · This rule is merged into the original rule "Command Injection - Generic 8 - body" (ID: 5b3ce84c099040c6a25cee2d413592e2).

Cloudflare Managed Ruleset · c825487afc274e34966052bb87ae8cfc · N/A · GitLab - Path Traversal- CVE:CVE-2026-85706 · Log · Block · This is a new detection.

Cloudflare Managed Ruleset · 86b0681d72234ef7bd6f67c7549f7356 · N/A · Generic - Request routing cache inconsistency · N/A · Block · This is a new detection.