Skip to content
Back to feed

September 1, 2026 · Cloudflare

WAF - WAF Release - 2026-09-01

This release introduces a new threat detection to enhance protection against SQL injection (SQLi) attempts exploiting complex query syntax.

Key Findings

  • SQLi Protection: Improved coverage for SQL injection patterns involving WHERE comparisons combined with WITH clauses.
RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare Managed Ruleset...bcfa0966N/ASQLi - WHERE Comparison With WITH ClauseLogBlockThis is a new detection.