WAF Release - 2026-10-22 - Emergency - Cloudflare Free Ruleset

This emergency release updates the names and metadata of seven existing rules in the Cloudflare Free Ruleset to identify CVE-2026-109618 and CVE-2026-109619. Detection logic and rule actions remain unchanged.

Ruleset · Rule ID · Legacy Rule ID · Description · Previous Action · New Action · Comments

Cloudflare Free Ruleset · 4e315666e8e344cdb64119a3b5ccf32f · N/A · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) · Block · N/A · Rule metadata description refined. Detection unchanged.

Cloudflare Free Ruleset · 00c10e6cc4da4bd08722adeebcd95984 · N/A · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #2 · Block · N/A · Rule metadata description refined. Detection unchanged.

Cloudflare Free Ruleset · 48ddf592361e4fdb97a8a85982dab691 · N/A · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3 · Block · N/A · Rule metadata description refined. Detection unchanged.

Cloudflare Free Ruleset · 3556683d512a47f2937899c524b1a4c6 · N/A · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4 · Block · N/A · Rule metadata description refined. Detection unchanged.

Cloudflare Free Ruleset · da07c85852e34625bb478496302ede46 · N/A · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #5 · Block · N/A · Rule metadata description refined. Detection unchanged.

Cloudflare Free Ruleset · 19373a83abb840e18ab3ce5a7975ce1b · N/A · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #6 · Block · N/A · Rule metadata description refined. Detection unchanged.

Cloudflare Free Ruleset · 07f0b6ddaabf40b1b2042dade8d613fa · N/A · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #7 · Block · N/A · Rule metadata description refined. Detection unchanged.

For more information, refer to WAF Managed Rules.