Skip to content
Cloudflare Docs

Scheduled changes

Subscribe to RSS

2026-03-16


WAF Release - Scheduled changes for 2026-03-23
Announcement DateRelease DateRelease BehaviorLegacy Rule IDRule IDDescriptionComments
2026-03-162026-03-23LogN/A Command Injection - Generic 9 - URI VectorThis is a new detection.
2026-03-162026-03-23LogN/A Command Injection - Generic 9 - Header VectorThis is a new detection.
2026-03-162026-03-23LogN/A Command Injection - Generic 9 - Body VectorThis is a new detection.
2026-03-162026-03-23LogN/A PHP, vBulletin, jQuery File Upload - Code Injection, Dangerous File Upload - CVE:CVE-2018-9206, CVE:CVE-2019-17132 (beta)This rule will be merged into the original rule "PHP, vBulletin, jQuery File Upload - Code Injection, Dangerous File Upload - CVE:CVE-2018-9206, CVE:CVE-2019-17132" (ID: )

For other WAF updates, refer to the changelog.