WAF - WAF Release - 2025-10-03

Managed Ruleset Updated This update introduces 21 new detections in the Cloudflare Managed Ruleset (all currently set to Disabled mode to preserve remediation logic and allow quick activation if needed). The rules cover a broad spectrum of threats - SQL injection techniques, command and code injection, information disclosure of common files, URL anomalies, and cross-site scripting. Ruleset Rule ID Legacy Rule ID Description Previous Action New Action Comments Cloudflare Managed Ruleset 0d02c2fb14eb4cec9c2e2b58d61fac74 100902 Generic Rules - Command Execution - 2 N/A Disabled This is a New Detection Cloudflare Managed Ruleset c3079865ce9a41368657026b514aeeb8 100908 Generic Rules - Command Execution - 3 N/A Disabled This is a New Detection Cloudflare Managed Ruleset 107ae2922b654bb28df7ca978d46a6f4 100910 Generic Rules - Command Execution - 4 N/A Disabled This is a New Detection Cloudflare Managed Ruleset 68bdb75ae6d24e139a83e5731bd0a329 100915 Generic Rules - Command Execution - 5 N/A Disabled This is a New Detection Cloudflare Managed Ruleset ea04bb580f7d400386c7dc1d5e51450a 100899 Generic Rules - Content-Type Abuse N/A Disabled This is a New Detection Cloudflare Managed Ruleset 233364f656ff42b8acc41dcd7996012f 100914 Generic Rules - Content-Type Injection N/A Disabled This is a New Detection Cloudflare Managed Ruleset 1aa695281c954513be3d003b93209312 100911 Generic Rules - Cookie Header Injection N/A Disabled This is a New Detection Cloudflare Managed Ruleset d9f9e4f5bf11489da52dccb40f373b3f 100905 Generic Rules - NoSQL Injection N/A Disabled This is a New Detection Cloudflare Managed Ruleset 5a1897b714e044a887c0f3f078a0ed04 100913 Generic Rules - NoSQL Injection - 2 N/A Disabled This is a New Detection Cloudflare Managed Ruleset 4d6fd28df4f1494e95e70d2c5d649624 100907 Generic Rules - Parameter Pollution N/A Disabled This is a New Detection Cloudflare Managed Ruleset 61181e3af5304f7396c7d01cfd1c674e 100906 Generic Rules - PHP Object Injection N/A Disabled This is a New Detection Cloudflare Managed Ruleset ed5190bfbe1b45a6a645126334c88168 100904 Generic Rules - Prototype Pollution N/A Disabled This is a New Detection Cloudflare Managed Ruleset 3ec33bc5ac77495a9f55020e3ab43f7e 100897 Generic Rules - Prototype Pollution 2 N/A Disabled This is a New Detection Cloudflare Managed Ruleset c6d752c4909e4b7e8eff6c780d94ee22 100903 Generic Rules - Reverse Shell N/A Disabled This is a New Detection Cloudflare Managed Ruleset caf37e7800bb4635bcc2eefcd5add8e3 100909 Generic Rules - Reverse Shell - 2 N/A Disabled This is a New Detection Cloudflare Managed Ruleset 475d090baead467c88dfabbb565c78b0 100898 Generic Rules - SSJI NoSQL N/A Disabled This is a New Detection Cloudflare Managed Ruleset f4c7f98934264c9c937eec1212b837a0 100896 Generic Rules - SSRF N/A Disabled This is a New Detection Cloudflare Managed Ruleset efd01b814d144e90b36522b311c4fb00 100895 Generic Rules - Template Injection N/A Disabled This is a New Detection Cloudflare Managed Ruleset 00a9a0d663da4add95b863abd3ed0123 100895A Generic Rules - Template Injection - 2 N/A Disabled This is a New Detection Cloudflare Managed Ruleset e58c0fffee4f4374bd37f2577501a1d9 100912 Generic Rules - XXE N/A Disabled This is a New Detection Cloudflare Managed Ruleset ab09ba8d00eb4cdbb7a6a65ddc55cdb6 100900 Relative Paths - Anomaly Headers N/A Disabled This is a New Detection