WAF Release - 2026-09-15
This release introduces new threat detections to enhance protection against command injection attempts, Server-Side Request Forgery (SSRF) targeting cloud metadata, and information disclosure within version control history.
| Ruleset | Rule ID | Legacy Rule ID | Description | Previous Action | New Action | Comments |
|---|---|---|---|---|---|---|
| Cloudflare Managed Ruleset | N/A | SSRF - Cloud - 3 | Log | Block | This is a new detection. | |
| Cloudflare Managed Ruleset | N/A | Version Control - Information Disclosure - Beta | Log | Block | This rule is merged into the original rule "Version Control - Information Disclosure" (ID: ). | |
| Cloudflare Managed Ruleset | N/A | Command Injection - Generic 10 | Log | Block | This is a new detection. |