WAF Release - 2026-10-06

This release introduces a new detection to mitigate a heap-based buffer overflow vulnerability in F5 BIG-IP, and enhances existing command injection protections by incorporating tested beta logic into the baseline rule.

Key Findings

• CVE-2026-94127: A heap-based buffer overflow vulnerability in F5 BIG-IP. Attackers can exploit this flaw to execute arbitrary code on the affected system.

Ruleset · Rule ID · Legacy Rule ID · Description · Previous Action · New Action · Comments

Cloudflare Managed Ruleset · e6fd9291701d4fea96741ba1a056caff · N/A · Command Injection - Generic 8 - uri - Beta · Log · Block · This rule is merged into the original rule "Command Injection - Generic 8 - uri" (ID: ff8df24181aa4573a81be531ee159e2e).

Cloudflare Managed Ruleset · f0c31de76290471e842c77ca7206c737 · N/A · F5 BIG-IP - UnAuth Heap-Overflow - CVE:CVE-2026-94127 · Log · Block · This is a new detection.

Cloudflare Managed Ruleset · 86b0681d72234ef7bd6f67c7549f7356 · N/A · Next.js - Cache Poisoning - CVE:CVE-2026-94543 · Block · Block · Rule metadata description refined. Detection unchanged.