WAF - WAF Release - 2026-09-30

<p>This release introduces new detections to enhance protection against a specific GitLab path traversal vulnerability, alongside advanced generic rules targeting HTTP request smuggling, directory traversal, and command injection attempts.</p> <p><strong>Key Findings</strong></p> <ul> <li>CVE-2026-85706: A path traversal vulnerability affecting GitLab.</li> </ul> <table style="width: 100%"><thead><tr><th>Ruleset</th><th>Rule ID</th><th>Legacy Rule ID</th><th>Description</th><th>Previous Action</th><th>New Action</th><th>Comments</th></tr></thead><tbody><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="f2445b9131214302a11477a2cb14ded8"><button type="button" title="Copy rule ID" aria-label="Copy rule ID f2445b9131214302a11477a2cb14ded8" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...cb14ded8</span></button></span></td><td>N/A</td><td>Broken Access Control - Directory Traversal</td><td>Log</td><td>Block</td><td>This is a new detection.</td></tr><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="5c1ba1fdb0a742d4beaaefd00364bd7e"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 5c1ba1fdb0a742d4beaaefd00364bd7e" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...0364bd7e</span></button></span></td><td>N/A</td><td>HTTP Request Smuggling - Request Body Anomaly - Beta</td><td>Log</td><td>Block</td><td>This rule is merged into the original rule &quot;HTTP/2 Request Smuggling - Request Body Anomaly&quot; (ID: <span class="rule-id" data-rule-id="a80f214f0947435dabb2ba2d1489d892"><button type="button" title="Copy rule ID" aria-label="Copy rule ID a80f214f0947435dabb2ba2d1489d892" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...1489d892</span></button></span>).</td></tr><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="09055ff9f80046419a3c0be5d498a69a"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 09055ff9f80046419a3c0be5d498a69a" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...d498a69a</span></button></span></td><td>N/A</td><td>Command Injection - Generic 8 - body - Beta</td><td>Disabled</td><td>Disabled</td><td>This rule is merged into the original rule &quot;Command Injection - Generic 8 - body&quot; (ID: <span class="rule-id" data-rule-id="5b3ce84c099040c6a25cee2d413592e2"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 5b3ce84c099040c6a25cee2d413592e2" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...413592e2</span></button></span>).</td></tr><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="c825487afc274e34966052bb87ae8cfc"><button type="button" title="Copy rule ID" aria-label="Copy rule ID c825487afc274e34966052bb87ae8cfc" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...87ae8cfc</span></button></span></td><td>N/A</td><td>GitLab - Path Traversal- CVE:CVE-2026-85706</td><td>Log</td><td>Block</td><td>This is a new detection.</td></tr><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="86b0681d72234ef7bd6f67c7549f7356"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 86b0681d72234ef7bd6f67c7549f7356" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...549f7356</span></button></span></td><td>N/A</td><td>Generic - Request routing cache inconsistency</td><td>N/A</td><td>Block</td><td>This is a new detection.</td></tr></tbody></table>