WAF - WAF Release - 2026-08-11

<p>This release introduces new protection for a remote code execution vulnerability in vBulletin and improves two existing detections.</p> <p><strong>Key Findings</strong></p> <ul> <li>A new detection provides protection against vBulletin CVE-2026-61511.</li> <li>Two existing detections have been improved to strengthen coverage.</li> </ul> <p><strong>Impact</strong></p> <p>Successful exploitation of CVE-2026-61511 may lead to remote code execution on affected vBulletin systems, potentially resulting in unauthorized access, data exposure, service disruption, and broader compromise of the hosting environment. Administrators are strongly encouraged to apply vendor updates and recommended mitigations.</p> <table style="width: 100%"><thead><tr><th>Ruleset</th><th>Rule ID</th><th>Legacy Rule ID</th><th>Description</th><th>Previous Action</th><th>New Action</th><th>Comments</th></tr></thead><tbody><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="1b0775f0f092483387cfb23f94f3006b"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 1b0775f0f092483387cfb23f94f3006b" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...94f3006b</span></button></span></td><td>N/A</td><td>vBulletin - Remote Code Execution - CVE:CVE-2026-61511</td><td>Log</td><td>Block</td><td>This is a new detection.</td></tr><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="784d3824b6cf419db6af0b64098b749e"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 784d3824b6cf419db6af0b64098b749e" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...098b749e</span></button></span></td><td>N/A</td><td>Version Control - Information Disclosure - Beta</td><td>Log</td><td>Block</td><td>This rule is merged into the original rule &quot;Version Control - Information Disclosure&quot; (ID: <span class="rule-id" data-rule-id="23548ee2b36547a1be09bb2c0550c529"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 23548ee2b36547a1be09bb2c0550c529" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...0550c529</span></button></span>)</td></tr><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="a561c9138b46470ca6db96edd56225d8"><button type="button" title="Copy rule ID" aria-label="Copy rule ID a561c9138b46470ca6db96edd56225d8" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...d56225d8</span></button></span></td><td>N/A</td><td>vBulletin - Code Injection - Invalid image format - CVE:CVE-2019-17132 - Beta</td><td>Log</td><td>Block</td><td>This rule is merged into the original rule &quot;vBulletin - Code Injection - Invalid image format - CVE:CVE-2019-17132&quot; (ID: <span class="rule-id" data-rule-id="5137834eb8634842852273a08fe9f1c7"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 5137834eb8634842852273a08fe9f1c7" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...8fe9f1c7</span></button></span>)</td></tr></tbody></table>