WAF - WAF Release - 2026-04-27

This week's release focuses on new improvements to enhance coverage. Key Findings Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage. Continuous Rule Improvements We are continuously refining our managed rules to provide more resilient protection and deeper insights into attack patterns. To ensure an optimal security posture, we recommend consistently monitoring the Security Events dashboard and adjusting rule actions as these enhancements are deployed. Ruleset Rule ID Legacy Rule ID Description Previous Action New Action Comments Cloudflare Managed Ruleset d866f980582748568385b94480cec1dd N/A PostgreSQL - SQLi - COPY - Beta Log Block This is a new detection. This rule is merged into the original rule "PostgreSQL - SQLi - COPY - Body (ID: 705a6b5569d5472596910e3ce7265a4e ). The rule previously known as "PostgreSQL - SQLi - COPY" is now renamed to "PostgreSQL - SQLi - COPY - Body". Cloudflare Managed Ruleset 71d133c374d94559aa9fdf042903de89 N/A PostgreSQL - SQLi - COPY - Headers Log Block This is a new detection. Cloudflare Managed Ruleset 9f1b1b7fd28a401b9d5c172d1036cfa6 N/A PostgreSQL - SQLi - COPY - URI Log Block This is a new detection. Cloudflare Managed Ruleset 8e40416659334b8ba789365755ff389e N/A SQLi - AND/OR MAKE_SET/ELT - Beta Log Block This is a new detection. This rule is merged into the original rule "SQLi - AND/OR MAKE_SET/ELT - Body" (ID: 0f41a593c8fe42c38a26f709252d3934 ). The rule previously known as "SQLi - AND/OR MAKE_SET/ELT" is now renamed to "SQLi - AND/OR MAKE_SET/ELT - Body". Cloudflare Managed Ruleset 1e0d4372ee1e41b9804b2d5c346487f9 N/A SQLi - AND/OR MAKE_SET/ELT - Headers Log Block This is a new detection. Cloudflare Managed Ruleset d2c961a164a64cf6b871c9511ac6ceca N/A SQLi - AND/OR MAKE_SET/ELT - URI Log Block This is a new detection. Cloudflare Managed Ruleset 4dacc0e6f32d4c5da3c2293edd471337 N/A SQLi - Common Patterns - Beta Log Block This is a new detection. This rule is merged into the original rule "SQLi - Common Patterns - Body" (ID: 98f746d07a6d48ab9dae669acb5d0b9b ). The rule previously known as "SQLi - Common Patterns" is now renamed to "SQLi - Common Patterns - Body". Cloudflare Managed Ruleset 53a374379f2e41e9934791c1975c07b7 N/A SQLi - Common Patterns - Headers Log Block This is a new detection. Cloudflare Managed Ruleset 9efedebfc371443f9fe7308605b1b06b N/A SQLi - Common Patterns - URI Log Block This is a new detection. Cloudflare Managed Ruleset d53a791496d64700870334f4dd0ba3c7 N/A SQLi - Equation - Beta Log Block This is a new detection. This rule is merged into the original rule "SQLi - Equation - Body" (ID: e7691e1e4f4d4769909f3df6c2eb3e7f ). The rule previously known as "SQLi - Equation" is now renamed to "SQLi - Equation - Body". Cloudflare Managed Ruleset 46efbd3496e64c3f902ad33d3d1c2384 N/A SQLi - Equation - Headers Log Block This is a new detection. Cloudflare Managed Ruleset 46b937649a424b7ead90f6d0e1149ea6 N/A SQLi - Equation - URI Log Block This is a new detection. Cloudflare Managed Ruleset 04d9182545f54ba8a4fa29fe205adbb0 N/A SQLi - AND/OR Digit Operator Digit - Beta Log Block This is a new detection. This rule is merged into the original rule "SQLi - AND/OR Digit Operator Digit - Body" (ID: 762dd334ed0b4273816e3ff13893c564 ). The rule previously known as "SQLi - AND/OR Digit Operator Digit" is now renamed to "SQLi - AND/OR Digit Operator Digit - Body". Cloudflare Managed Ruleset a24e7c15503948bc8766481aad2abbaa N/A SQLi - AND/OR Digit Operator Digit - Headers Log Block This is a new detection. Cloudflare Managed Ruleset 0c55eb362df64f92a85aa46753acbc0d N/A SQLi - AND/OR Digit Operator Digit - URI Log Block This is a new detection. Cloudflare Managed Ruleset 18c9879b7e184c559d23c1652b45a97d N/A SQLi - Benchmark Function - Beta Log Block This is a new detection. This rule is merged into the original rule "SQLi - Benchmark Function - Body" (ID: ac4e9ebfb43a4f3998f6072d2ebc44ad ). The rule previously known as "SQLi - Benchmark Function" is now renamed to "SQLi - Benchmark Function - Body". Cloudflare Managed Ruleset 2adbc36c52324efcb4681b829889aadc N/A SQLi - Benchmark Function - Headers Log Block This is a new detection. Cloudflare Managed Ruleset 69564af3bc54406080deed72491b28e9 N/A SQLi - Benchmark Function - URI Log Block This is a new detection. Cloudflare Managed Ruleset 94b1646f0b0b46ec9b96f7742aa649de N/A SQLi - Comparison - Beta Log Block This is a new detection. This rule is merged into the original rule "SQLi - Comparison - Body" (ID: 8166da327a614849bfa29317e7907480 ). The rule previously known as "SQLi - Comparison" is now renamed to "SQLi - Comparison - Body". Cloudflare Managed Ruleset 455ce87681bd4200bf53456c39e3e013 N/A SQLi - Comparison - Headers Log Block This is a new detection. Cloudflare Managed Ruleset 8152816062ed47f69be0f907f4bdb492 N/A SQLi - Comparison - URI Log Block This is a new detection. Cloudflare Managed Ruleset d5afd403a0544248b829fe5da1ff3b34 N/A SQLi - String Concatenation - Body - Beta Log Block This is a new detection. This rule is merged into the original rule "SQLi - String Concatenation - Headers" (ID: 3b0c61407d0b4f7d87e516472116d2fe ).The rule previously known as "SQLi - String Concatenation - Headers" is now renamed to "SQLi - String Concatenation - Body". Cloudflare Managed Ruleset cb0ec290ee454138abe18b750d0e6c3b N/A SQLi - String Concatenation - Headers Log Block This is a new detection.(Former Id was 380099df2bb2469c91ebbb7b846d1940 ) Cloudflare Managed Ruleset c46d9097c9ef419aa4d9f10626cc211f N/A SQLi - String Concatenation - URI Log Block This is a new detection. (Former Id was bd19397228404b85aa3797238fae8c84 ) Cloudflare Managed Ruleset 6542d36980cf4018b4d5e2bfeacc78ab N/A SQLi - SELECT Expression - Beta Log Block This is a new detection. This rule is merged into the original rule "SQLi - SELECT Expression - Body" (ID: 00da180570d34b5bae2121acd0023a36 ). The rule previously known as "SQLi - SELECT Expression" is now renamed to "SQLi - SELECT Expression - Body". Cloudflare Managed Ruleset 4073f7b575ff45dfb7621b43630bb223 N/A SQLi - SELECT Expression - Headers Log Block This is a new detection. Cloudflare Managed Ruleset 2721e3184d50466ea637e9afdcd6efb5 N/A SQLi - SELECT Expression - URI Log Block This is a new detection. Cloudflare Managed Ruleset 7ecca84c08aa4aad9b5a7bda18c47cea N/A SQLi - ORD and ASCII - Beta Log Block This is a new detection. This rule is merged into the original rule "SQLi - ORD and ASCII- Body" (ID: 2fc38b34a9d744d2a3cbcc41d0d207f9 ). The rule previously known as "SQLi - ORD and ASCII" is now renamed to "SQLi - ORD and ASCII- Body". Cloudflare Managed Ruleset f6d10e10c9514eb49dcc2122bdb1618f N/A SQLi - ORD and ASCII - URI Log Block This is a new detection. Cloudflare Managed Ruleset 60704f5c5513425c94cf77031d0906b6 N/A SQLi - ORD and ASCII - Headers Log Block This is a new detection. Cloudflare Managed Ruleset 700613b191d3479ea2782b4e9fe4eff5 N/A SQLi - Destructive Operations Log Block This is a new detection.