WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Managed Ruleset

This emergency release updates the names and metadata of seven existing rules in the Cloudflare Managed Ruleset to identify CVE-2026-109618 and CVE-2026-109619. Detection logic and rule actions remain unchanged.

RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare Managed Ruleset...c438d5ddN/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619)BlockN/ARule metadata description refined. Detection unchanged.Cloudflare Managed Ruleset...0a0c2f64N/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #2BlockN/ARule metadata description refined. Detection unchanged.Cloudflare Managed Ruleset...545d163cN/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3BlockN/ARule metadata description refined. Detection unchanged.Cloudflare Managed Ruleset...212afcc9N/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4BlockN/ARule metadata description refined. Detection unchanged.Cloudflare Managed Ruleset...1867b12eN/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #5BlockN/ARule metadata description refined. Detection unchanged.Cloudflare Managed Ruleset...9d9c073dN/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #6BlockN/ARule metadata description refined. Detection unchanged.Cloudflare Managed Ruleset...48143645N/APHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #7BlockN/ARule metadata description refined. Detection unchanged.

For more information, refer to WAF Managed Rules.