Changelog

New updates and improvements at Cloudflare.

Subscribe to RSS View RSS feeds

Application security

Feb 20, 2026

1. Manage Cloudflare Tunnel directly from the main Cloudflare Dashboard

   Cloudflare Tunnel Cloudflare Tunnel for SASE

   Cloudflare Tunnel is now available in the main Cloudflare Dashboard at Networking > Tunnels ↗, bringing first-class Tunnel management to developers using Tunnel for securing origin servers.

   

   This new experience provides everything you need to manage Tunnels for public applications, including:

   • Full Tunnel lifecycle management: Create, configure, delete, and monitor all your Tunnels in one place.
   • Native integrations: View Tunnels by name when configuring DNS records and Workers VPC — no more copy-pasting UUIDs.
   • Real-time visibility: Monitor replicas and Tunnel health status directly in the dashboard.
   • Routing map: Manage all ingress routes for your Tunnel, including public applications, private hostnames, private CIDRs, and Workers VPC services, from a single interactive interface.

   Choose the right dashboard for your use case

   Core Dashboard: Navigate to Networking > Tunnels ↗ to manage Tunnels for:

   • Securing origin servers and public applications with CDN, WAF, Load Balancing, and DDoS protection
   • Connecting Workers to private services via Workers VPC

   Cloudflare One Dashboard: Navigate to Zero Trust > Networks > Connectors ↗ to manage Tunnels for:

   • Securing your public applications with Zero Trust access policies
   • Connecting users to private applications
   • Building a private mesh network

   Both dashboards provide complete Tunnel management capabilities — choose based on your primary workflow.

   Get started

   New to Tunnel? Learn how to get started with Cloudflare Tunnel or explore advanced use cases like securing SSH servers or running Tunnels in Kubernetes.

Feb 19, 2026

1. Cloudforce One Threat events graphs are now visible in the dashboard

   Security Center

   We have introduced dynamic visualizations to the Threat Events dashboard to help you better understand the threat landscape and identify emerging patterns at a glance.

   What's new:

   • Sankey Diagrams: Trace the flow of attacks from country of origin to target country to identify which regions are being hit hardest and where the threat infrastructure resides.
   
   • Dataset Distribution over time: Instantly pivot your view to understand if a specific campaign is targeting your sector or if it is a broad-spectrum commodity attack.
   
   • Enhanced Filtering: Use these visual tools to filter and drill down into specific attack vectors directly from the charts.

   Cloudforce One subscribers can explore these new views now in Application Security > Threat Intelligence > Threat Events ↗.

Feb 16, 2026

1. WAF Release - 2026-02-16

   WAF

   This week’s release introduces new detections for CVE-2025-68645 and CVE-2025-31125.

   Key Findings

   • CVE-2025-68645: A Local File Inclusion (LFI) vulnerability in the Webmail Classic UI of Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 allows unauthenticated remote attackers to craft requests to the /h/rest endpoint, improperly influence internal dispatching, and include arbitrary files from the WebRoot directory.
   • CVE-2025-31125: Vite, the JavaScript frontend tooling framework, exposes content of non-allowed files via ?inline&import when its development server is network-exposed, enabling unauthorized attackers to read arbitrary files and potentially leak sensitive information.

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...833761f7	N/A	Zimbra - Local File Inclusion - CVE:CVE-2025-68645	Log	Block	This is a new detection.
   Cloudflare Managed Ruleset	...950ed8c8	N/A	Vite - WASM Import Path Traversal - CVE:CVE-2025-31125	Log	Block	This is a new detection.

Feb 12, 2026

1. Enhanced Logo Matching for Brand Protection

   Security Center

   We have significantly upgraded our Logo Matching capabilities within Brand Protection. While previously limited to approximately 100% matches, users can now detect a wider range of brand assets through a redesigned matching model and UI.

   What's new

   • Configurable match thresholds: Users can set a minimum match score (starting at 75%) when creating a logo query to capture subtle variations or high-quality impersonations.
   • Visual match scores: Allow users to see the exact percentage of the match directly in the results table, highlighted with color-coded lozenges to indicate severity.
   • Direct logo previews: Available in the Cloudflare dashboard — similar to string matches — to verify infringements at a glance.

   Key benefits

   • Expose sophisticated impersonators who use slightly altered logos to bypass basic detection filters.
   • Faster triage of the most relevant threats immediately using visual indicators, reducing the time spent manually reviewing matches.

   Ready to protect your visual identity? Learn more in our Brand Protection documentation.

Feb 10, 2026

1. WAF Release - 2026-02-10

   WAF

   This week’s release changes the rule action from BLOCK to Disabled for Anomaly:Header:User-Agent - Fake Google Bot.

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...6aa0bef8	N/A	Anomaly:Header:User-Agent - Fake Google Bot	Enabled	Disabled	We are changing the action for this rule from BLOCK to Disabled

Feb 03, 2026

1. Threat actor identification with "also known as" aliases

   Security Center

   Identifying threat actors can be challenging, because naming conventions often vary across the security industry. To simplify your research, Cloudflare Threat Events now include an Also known as field, providing a list of common aliases and industry-standard names for the groups we track.

   This new field is available in both the Cloudflare dashboard and via the API. In the dashboard, you can view these aliases by expanding the event details side panel (under the Attacker field) or by adding it as a column in your configurable table view.

   Key benefits

   • Easily map Cloudflare-tracked actors to the naming conventions used by other vendors without manual cross-referencing.
   • Quickly identify if a detected threat actor matches a group your team is already monitoring via other intelligence feeds.

   For more information on how to access this data, refer to the Threat Events API documentation ↗.

Feb 02, 2026

1. WAF Release - 2026-02-02

   WAF

   This week’s release introduces new detections for CVE-2025-64459 and CVE-2025-24893.

   Key Findings

   • CVE-2025-64459: Django versions prior to 5.1.14, 5.2.8, and 4.2.26 are vulnerable to SQL injection via crafted dictionaries passed to QuerySet methods and the Q() class.
   • CVE-2025-24893: XWiki allows unauthenticated remote code execution through crafted requests to the SolrSearch endpoint, affecting the entire installation.

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...30698ff3	N/A	XWiki - Remote Code Execution - CVE:CVE-2025-24893 2	Log	Block	This is a new detection.
   Cloudflare Managed Ruleset	...da8ba7e6	N/A	Django SQLI - CVE:CVE-2025-64459	Log	Block	This is a new detection.
   Cloudflare Managed Ruleset	...8d667511	N/A	NoSQL, MongoDB - SQLi - Comparison - 2	Block	Block	Rule metadata description refined. Detection unchanged.

Jan 27, 2026

1. Control request and response body buffering in Configuration Rules

   Rules

   You can now control how Cloudflare buffers HTTP request and response bodies using two new settings in Configuration Rules.

   Request body buffering

   Controls how Cloudflare buffers HTTP request bodies before forwarding them to your origin server:

   Mode	Behavior
   Standard (default)	Cloudflare can inspect a prefix of the request body for enabled functionality such as WAF and Bot Management.
   Full	Buffers the entire request body before sending to origin.
   None	No buffering — the request body streams directly to origin without inspection.

   Response body buffering

   Controls how Cloudflare buffers HTTP response bodies before forwarding them to the client:

   Mode	Behavior
   Standard (default)	Cloudflare can inspect a prefix of the response body for enabled functionality.
   None	No buffering — the response body streams directly to the client without inspection.

   Warning

   Setting body buffering to None may break security functionality that requires body inspection, including the Web Application Firewall (WAF) and Bot Management. Ensure that any paths where you disable buffering do not require security inspection.

   API example

   {
     "action": "set_config",
     "action_parameters": {
       "request_body_buffering": "standard",
       "response_body_buffering": "none"
     }
   }

   For more information, refer to Configuration Rules.

Jan 26, 2026

1. WAF Release - 2026-01-26

   WAF

   This week’s release introduces new detections for denial-of-service attempts targeting React CVE-2026-23864 (https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗).

   Key Findings

   • CVE-2026-23864 (https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗) affects react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack packages.
   • Attackers can send crafted HTTP requests to Server Function endpoints, causing server crashes, out-of-memory exceptions, or excessive CPU usage.

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...61680354	N/A	React Server - DOS - CVE:CVE-2026-23864 - 1	N/A	Block	This is a new detection.
   Cloudflare Managed Ruleset	...dcdffcf8	N/A	React Server - DOS - CVE:CVE-2026-23864 - 2	N/A	Block	This is a new detection.
   Cloudflare Managed Ruleset	...349edbc6	N/A	React Server - DOS - CVE:CVE-2026-23864 - 3	N/A	Block	This is a new detection.

Jan 22, 2026

1. New cryptographic functions — encode_base64() and sha256()

   Rules

   Cloudflare Rulesets now includes encode_base64() and sha256() functions, enabling you to generate signed request headers directly in rule expressions. These functions support common patterns like constructing a canonical string from request attributes, computing a SHA256 digest, and Base64-encoding the result.

   ---

   New functions

   Function	Description	Availability
   encode_base64(input, flags)	Encodes a string to Base64 format. Optional flags parameter: u for URL-safe encoding, p for padding (adds = characters to make the output length a multiple of 4, as required by some systems). By default, output is standard Base64 without padding.	All plans (in header transform rules)
   sha256(input)	Computes a SHA256 hash of the input string.	Requires enablement

   Note

   The sha256() function is available as an Enterprise add-on and requires a specific entitlement. Contact your account team to enable it.

   ---

   Examples

   Encode a string to Base64 format:

   encode_base64("hello world")

   Returns: aGVsbG8gd29ybGQ

   Encode a string to Base64 format with padding:

   encode_base64("hello world", "p")

   Returns: aGVsbG8gd29ybGQ=

   Perform a URL-safe Base64 encoding of a string:

   encode_base64("hello world", "u")

   Returns: aGVsbG8gd29ybGQ

   Compute the SHA256 hash of a secret token:

   sha256("my-token")

   Returns a hash that your origin can validate to authenticate requests.

   Compute the SHA256 hash of a string and encode the result to Base64 format:

   encode_base64(sha256("my-token"))

   Combines hashing and encoding for systems that expect Base64-encoded signatures.

   For more information, refer to the Functions reference.

Jan 20, 2026

1. New functions for array and map operations

   Rules

   New functions for array and map operations

   Cloudflare Rulesets now include new functions that enable advanced expression logic for evaluating arrays and maps. These functions allow you to build rules that match against lists of values in request or response headers, enabling use cases like country-based blocking using custom headers.

   ---

   New functions

   Function	Description
   split(source, delimiter)	Splits a string into an array of strings using the specified delimiter.
   join(array, delimiter)	Joins an array of strings into a single string using the specified delimiter.
   has_key(map, key)	Returns true if the specified key exists in the map.
   has_value(map, value)	Returns true if the specified value exists in the map.

   ---

   Example use cases

   Check if a country code exists in a header list:

   has_value(split(http.response.headers["x-allow-country"][0], ","), ip.src.country)

   Check if a specific header key exists:

   has_key(http.request.headers, "x-custom-header")

   Join array values for logging or comparison:

   join(http.request.headers.names, ", ")

   For more information, refer to the Functions reference.

Jan 20, 2026

1. WAF Release - 2026-01-20

   WAF

   This week's release focuses on improvements to existing detections to enhance coverage.

   Key Findings

   • Existing rule enhancements have been deployed to improve detection resilience against SQL injection.
   
   

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...68d90c8f	N/A	SQLi - Comment - Beta	Log	Block	This rule is merged into the original rule "SQLi - Comment" (ID: ...6d8d8fe4 )
   Cloudflare Managed Ruleset	...faa045cf	N/A	SQLi - Comparison - Beta	Log	Block	This rule is merged into the original rule "SQLi - Comparison" (ID: ...e7907480 )

Jan 15, 2026

1. Verify WARP Connector connectivity with a simple ping

   Cloudflare Tunnel Cloudflare Tunnel for SASE

   We have made it easier to validate connectivity when deploying WARP Connector as part of your software-defined private network.

   You can now ping the WARP Connector host directly on its LAN IP address immediately after installation. This provides a fast, familiar way to confirm that the Connector is online and reachable within your network before testing access to downstream services.

   Starting with version 2025.10.186.0, WARP Connector responds to traffic addressed to its own LAN IP, giving you immediate visibility into Connector reachability.

   Learn more about deploying WARP Connector and building private network connectivity with Cloudflare One.

Jan 15, 2026

1. WAF Release - 2026-01-15

   WAF

   This week's release focuses on improvements to existing detections to enhance coverage.

   Key Findings

   • Existing rule enhancements have been deployed to improve detection resilience against SQL Injection.
   
   

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...ad7dad3e	N/A	SQLi - String Function - Beta	Log	Block	This rule is merged into the original rule "SQLi - String Function" (ID: ...d32b798c )
   Cloudflare Managed Ruleset	...9e553ad3	N/A	SQLi - Sub Query - Beta	Log	Block	This rule is merged into the original rule "SQLi - Sub Query" (ID: ...743e66b1 )

Jan 14, 2026

1. URL Scanner now supports PDF report downloads

   Security Center

   We have expanded the reporting capabilities of the Cloudflare URL Scanner. In addition to existing JSON and HAR exports, users can now generate and download a PDF report directly from the Cloudflare dashboard. This update streamlines how security analysts can share findings with stakeholders who may not have access to the Cloudflare dashboard or specialized tools to parse JSON and HAR files.

   Key Benefits:

   • Consolidate scan results, including screenshots, security signatures, and metadata, into a single, portable document
   • Easily share professional-grade summaries with non-technical stakeholders or legal teams for faster incident response

   What’s new:

   • PDF Export Button: A new download option is available in the URL Scanner results page within the Cloudflare dashboard
   • Unified Documentation: Access all scan details—from high-level summaries to specific security flags—in one offline-friendly file

   To get started with the URL Scanner and explore our reporting capabilities, visit the URL Scanner API documentation ↗.

   ---

Jan 12, 2026

1. Metro code field now available in Rules

   Rules

   The ip.src.metro_code field in the Ruleset Engine is now populated with DMA (Designated Market Area) data.

   You can use this field to build rules that target traffic based on geographic market areas, enabling more granular location-based policies for your applications.

   Field details

   Field	Type	Description
   ip.src.metro_code	String | null	The metro code (DMA) of the incoming request's IP address. Returns the designated market area code for the client's location.

   Example filter expression:

   ip.src.metro_code eq "501"

   For more information, refer to the Fields reference.

Jan 12, 2026

1. Cloudflare Threat Events now support STIX2 format

   Security Center

   We are excited to announce that Cloudflare Threat Events now supports the STIX2 (Structured Threat Information Expression) format. This was a highly requested feature designed to streamline how security teams consume and act upon our threat intelligence.

   By adopting this industry-standard format, you can now integrate Cloudflare's threat events data more effectively into your existing security ecosystem.

   Key benefits

   • Eliminate the need for custom parsers, as STIX2 allows for "out of the box" ingestion into major Threat Intel Platforms (TIPs), SIEMs, and SOAR tools.

   • STIX2 provides a standardized way to represent relationships between indicators, sightings, and threat actors, giving your analysts a clearer picture of the threat landscape.

   For technical details on how to query events using this format, please refer to our Threat Events API Documentation ↗.

   ---

Jan 12, 2026

1. WAF Release - 2026-01-12

   WAF

   This week's release focuses on improvements to existing detections to enhance coverage.

   Key Findings

   • Existing rule enhancements have been deployed to improve detection resilience against SQL Injection.
   
   

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...48a1841a	N/A	SQLi - AND/OR MAKE_SET/ELT - Beta	Log	Block	This rule is merged into the original rule "SQLi - AND/OR MAKE_SET/ELT" (ID: ...252d3934 )
   Cloudflare Managed Ruleset	...9e553ad3	N/A	SQLi - Benchmark Function - Beta	Log	Block	This rule is merged into the original rule "SQLi - Benchmark Function" (ID: ...2ebc44ad )

Dec 18, 2025

1. WAF Release - 2025-12-18

   WAF

   This week's release focuses on improvements to existing detections to enhance coverage.

   Key Findings

   • Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage.
   
   
   
   

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...be5ec20c	N/A	Atlassian Confluence - Code Injection - CVE:CVE-2021-26084 - Beta	Log	Block	This rule is merged into the original rule "Atlassian Confluence - Code Injection - CVE:CVE-2021-26084" (ID: ...69e0b97a )
   Cloudflare Managed Ruleset	...0d9206e3	N/A	PostgreSQL - SQLi - Copy - Beta	Log	Block	This rule is merged into the original rule "PostgreSQL - SQLi - COPY" (ID: ...e7265a4e )
   Cloudflare Managed Ruleset	...0cd00ba7	N/A	Generic Rules - Command Execution - Body	Log	Disabled	This is a new detection.
   Cloudflare Managed Ruleset	...cd679ad4	N/A	Generic Rules - Command Execution - Header	Log	Disabled	This is a new detection.
   Cloudflare Managed Ruleset	...fd181fb3	N/A	Generic Rules - Command Execution - URI	Log	Disabled	This is a new detection.
   Cloudflare Managed Ruleset	...7a95bc3a	N/A	SQLi - Tautology - URI - Beta	Log	Block	This rule is merged into the original rule "SQLi - Tautology - URI" (ID: ...b3de2e0a )
   Cloudflare Managed Ruleset	...432ac90d	N/A	SQLi - WaitFor Function - Beta	Log	Block	This rule is merged into the original rule "SQLi - WaitFor Function" (ID: ...d5faba59 )
   Cloudflare Managed Ruleset	...596c741e	N/A	SQLi - AND/OR Digit Operator Digit 2 - Beta	Log	Block	This rule is merged into the original rule "SQLi - AND/OR Digit Operator Digit" (ID: ...88d80772 )
   Cloudflare Managed Ruleset	...03b2f3fe	N/A	SQLi - Equation 2 - Beta	Log	Block	This rule is merged into the original rule "SQLi - Equation" (ID: ...a72a6b3a )

Dec 11, 2025

1. WAF Release - 2025-12-11 - Emergency

   WAF

   This emergency release introduces rules for CVE-2025-55183 and CVE-2025-55184, targeting server-side function exposure and resource-exhaustion patterns, respectively.

   Key Findings

   Added coverage for Leaking Server Functions (CVE-2025-55183) and React Function DoS detection (CVE-2025-55184).

   Impact

   These updates strengthen protection for server-function abuse techniques (CVE-2025-55183, CVE-2025-55184) that may expose internal logic or disrupt application availability.

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...fefb4e9b	N/A	React - Leaking Server Functions - CVE:CVE-2025-55183	N/A	Block	This was labeled as Generic - Server Function Source Code Exposure.
   Cloudflare Free Ruleset	...251e86aa	N/A	React - Leaking Server Functions - CVE:CVE-2025-55183	N/A	Block	This was labeled as Generic - Server Function Source Code Exposure.
   Cloudflare Managed Ruleset	...102ec699	N/A	React - DoS - CVE:CVE-2025-55184	N/A	Disabled	This was labeled as Generic – Server Function Resource Exhaustion.

Dec 10, 2025

1. WAF Release - 2025-12-10 - Emergency

   WAF

   This additional week's emergency release introduces improvements to our existing rule for React – Remote Code Execution – CVE-2025-55182 - 2, along with two new generic detections covering server-side function exposure and resource-exhaustion patterns.

   Key Findings

   Enhanced detection logic for React – RCE – CVE-2025-55182, added Generic – Server Function Source Code Exposure, and added Generic – Server Function Resource Exhaustion.

   Impact

   These updates strengthen protection against React RCE exploitation attempts and broaden coverage for common server-function abuse techniques that may expose internal logic or disrupt application availability.

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...15fce168	N/A	React - Remote Code Execution - CVE:CVE-2025-55182 - 2	N/A	Block	This is an improved detection.
   Cloudflare Free Ruleset	...74746aff	N/A	React - Remote Code Execution - CVE:CVE-2025-55182 - 2	N/A	Block	This is an improved detection.
   Cloudflare Managed Ruleset	...fefb4e9b	N/A	Generic - Server Function Source Code Exposure	N/A	Block	This is a new detection.
   Cloudflare Free Ruleset	...251e86aa	N/A	Generic - Server Function Source Code Exposure	N/A	Block	This is a new detection.
   Cloudflare Managed Ruleset	...102ec699	N/A	Generic - Server Function Resource Exhaustion	N/A	Disabled	This is a new detection.

Dec 05, 2025

1. Increased WAF payload limit for all plans

   WAF

   Cloudflare WAF now inspects request-payload size of up to 1 MB across all plans to enhance our detection capabilities for React RCE (CVE-2025-55182).

   Key Findings

   React payloads commonly have a default maximum size of 1 MB. Cloudflare WAF previously inspected up to 128 KB on Enterprise plans, with even lower limits on other plans.

   Update: We later reinstated the maximum request-payload size the Cloudflare WAF inspects. Refer to Updating the WAF maximum payload values for details.

Dec 05, 2025

1. Updating the WAF maximum payload values

   WAF

   We are reinstating the maximum request-payload size the Cloudflare WAF inspects, with WAF on Enterprise zones inspecting up to 128 KB.

   Key Findings

   On December 5, 2025, we initially attempted to increase the maximum WAF payload limit to 1 MB across all plans. However, an automatic rollout for all customers proved impractical because the increase led to a surge in false positives for existing managed rules.

   This issue was particularly notable within the Cloudflare Managed Ruleset and the Cloudflare OWASP Core Ruleset, impacting customer traffic.

   Impact

   Customers on paid plans can increase the limit to 1 MB for any of their zones by contacting Cloudflare Support. Free zones are already protected up to 1 MB and do not require any action.

Dec 03, 2025

1. WAF Release - 2025-12-03 - Emergency

   WAF

   The WAF rule deployed yesterday to block unsafe deserialization-based RCE has been updated. The rule description now reads “React – RCE – CVE-2025-55182”, explicitly mapping to the recently disclosed React Server Components vulnerability. Detection logic remains unchanged.

   Key Findings

   Rule description updated to reference React – RCE – CVE-2025-55182 while retaining existing unsafe-deserialization detection.

   Impact

   Improved classification and traceability with no change to coverage against remote code execution attempts.

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...5fb92fba	N/A	React - RCE - CVE:CVE-2025-55182	N/A	Block	Rule metadata description changed. Detection unchanged.
   Cloudflare Free Ruleset	...99702280	N/A	React - RCE - CVE:CVE-2025-55182	N/A	Block	Rule metadata description changed. Detection unchanged.

Dec 02, 2025

1. WAF Release - 2025-12-02 - Emergency

   WAF

   This week's emergency release introduces a new rule to block a critical RCE vulnerability in widely-used web frameworks through unsafe deserialization patterns.

   Key Findings

   New WAF rule deployed for RCE Generic Framework to block malicious POST requests containing unsafe deserialization patterns. If successfully exploited, this vulnerability allows attackers with network access via HTTP to execute arbitrary code remotely.

   Impact

   • Successful exploitation allows unauthenticated attackers to execute arbitrary code remotely through crafted serialization payloads, enabling complete system compromise, data exfiltration, and potential lateral movement within affected environments.

   Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
   Cloudflare Managed Ruleset	...5fb92fba	N/A	RCE Generic - Framework	N/A	Block	This is a new detection.
   Cloudflare Free Ruleset	...99702280	N/A	RCE Generic - Framework	N/A	Block	This is a new detection.

← Prev

123 … 6

Next →

Search all changelog entries