releases.shpreview
Cloudflare/Cloudflare Changelog/WAF - WAF Release - 2026-03-23

WAF - WAF Release - 2026-03-23

$npx -y @buildinternet/releases show rel_GEK9G601HIzFFz2vyNpBQ

This week's release focuses on new improvements to enhance coverage. Key Findings

Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage.

RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare Managed Ruleset54ad0465c30d4cd2ac7a707197321c6c N/ACommand Injection - Generic 9 - URI VectorLogDisabledThis is a new detection.Cloudflare Managed Rulesetb31c34a7b29b4aaf9be6883d1eb7a999 N/A Command Injection - Generic 9 - Header Vector Log Disabled This is a new detection.Cloudflare Managed Ruleset155bb67d1061479e995a38510677175f N/A Command Injection - Generic 9 - Body Vector Log Disabled This is a new detection.Cloudflare Managed Ruleset55fb1c76f0304f6a9d935d03479da68f N/APHP, vBulletin, jQuery File Upload - Code Injection, Dangerous File Upload - CVE:CVE-2018-9206, CVE:CVE-2019-17132 (beta)LogBlockThis rule has been merged into the original rule "PHP, vBulletin, jQuery File Upload - Code Injection, Dangerous File Upload - CVE:CVE-2018-9206, CVE:CVE-2019-17132" (ID: 0f2da91cec674eb58006929e824b817c )

Fetched April 4, 2026