Catalog / Cloudflare Developer Platform

WAF - WAF Release - Scheduled changes for 2026-09-29

yesterdaysecurityaddedOriginal notes
Announcement DateRelease DateRelease BehaviorLegacy Rule IDRule IDDescriptionComments
2026-09-222026-09-29LogN/A...cb14ded8Broken Access Control - Directory Traversal

This is a new detection.

2026-09-222026-09-29LogN/A...0364bd7eHTTP Request Smuggling - Request Body Anomaly - Beta

This rule will be merged into the original rule "HTTP/2 Request Smuggling - Request Body Anomaly" (ID: ...1489d892).

2026-09-222026-09-29DisabledN/A...d498a69aCommand Injection - Generic 8 - body - Beta

This rule will be merged into the original rule "Command Injection - Generic 8 - body" (ID: ...413592e2).

2026-09-222026-09-29LogN/A...a056caffCommand Injection - Generic 8 - uri - Beta

This rule will be merged into the original rule "Command Injection - Generic 8 - uri" (ID: ...ee159e2e).

2026-09-222026-09-29LogN/A...87ae8cfcGitLab - Path Traversal- CVE:CVE-2026-85706

This is a new detection.