WAF - WAF Release - 2026-10-30 - Emergency

<p>This emergency release adds a new rule to the Cloudflare Managed Ruleset, disabled by default, for a vulnerability in Nuxt Image and IPX. The rule offers partial coverage. Please follow the advisory and patch to the latest version.</p> <table style="width: 100%"><thead><tr><th>Ruleset</th><th>Rule ID</th><th>Legacy Rule ID</th><th>Description</th><th>Previous Action</th><th>New Action</th><th>Comments</th></tr></thead><tbody><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="ae8259332dc441288c46211f5b82bffe"><button type="button" title="Copy rule ID" aria-label="Copy rule ID ae8259332dc441288c46211f5b82bffe" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...5b82bffe</span></button></span></td><td>N/A</td><td>Nuxt Image / IPX - Explicit GIF or Animation Modifier Exposure</td><td>N/A</td><td>Disabled</td><td>This is a new detection.</td></tr></tbody></table>