WAF - WAF Release - 2026-07-17 - Emergency

<p>This emergency release adds a new managed rule to block active exploitation of a critical remote code execution (RCE) and SQL injection (SQLi) vulnerability found in popular web frameworks.</p> <p><strong>Key Findings</strong></p> <ul> <li> <p>Generic Frameworks - Unauthenticated RCE: Attackers can execute arbitrary system commands with web server privileges by sending malicious input containing invalid path sequences during request processing.</p> </li> <li> <p>Generic Frameworks - SQLi: Attackers can execute unauthorized database queries due to a failure to sanitize input values within request parameters.</p> </li> </ul> <table style="width: 100%"><thead><tr><th>Ruleset</th><th>Rule ID</th><th>Legacy Rule ID</th><th>Description</th><th>Previous Action</th><th>New Action</th><th>Comments</th></tr></thead><tbody><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="7dfb2bd4708d4b88b9911dc0550664b6"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 7dfb2bd4708d4b88b9911dc0550664b6" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...550664b6</span></button></span></td><td>N/A</td><td>Generic Rules - Unauthenticated RCE</td><td>N/A</td><td>Block</td><td>This is a new detection.</td></tr><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="1c060d3a371549219ee290d7ed933fcc"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 1c060d3a371549219ee290d7ed933fcc" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...ed933fcc</span></button></span></td><td>N/A</td><td>Generic Rules - SQLi </td><td>N/A</td><td>Block</td><td>This is a new detection.</td></tr><tr><td>Cloudflare Free Ruleset</td><td><span class="rule-id" data-rule-id="ebd3f2df15c74ddcbf6220c9b5ec246a"><button type="button" title="Copy rule ID" aria-label="Copy rule ID ebd3f2df15c74ddcbf6220c9b5ec246a" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...b5ec246a</span></button></span></td><td>N/A</td><td>Generic Rules - Unauthenticated RCE </td><td>N/A</td><td>Block</td><td>This is a new detection.</td></tr><tr><td>Cloudflare Free Ruleset</td><td><span class="rule-id" data-rule-id="db003b39b7774859a8d588ce33697a1a"><button type="button" title="Copy rule ID" aria-label="Copy rule ID db003b39b7774859a8d588ce33697a1a" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...33697a1a</span></button></span></td><td>N/A</td><td>Generic Rules - SQLi </td><td>N/A</td><td>Block</td><td>This is a new detection.</td></tr></tbody></table>