New WAF rules

Every dated vendor rule change that names a CVE, newest first.

RSS · JSON

2026-10-30CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3
Updated · Block
2026-10-30CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3
Updated · Block
2026-10-30CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3
Updated · Block
2026-10-30CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3
Updated · Block
2026-10-30CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4
Updated · Block
2026-10-30CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4
Updated · Block
2026-10-30CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4
Updated · Block
2026-10-30CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4
Updated · Block
2026-10-28CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560) #6
Updated · Block
2026-10-28CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560) #6
Updated · Block
2026-10-28CloudflareCVE-2026-115560
CVE-2026-115560 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560) #6
Updated · Block
2026-10-28CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560) #6
Updated · Block
2026-10-28CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560) #6
Updated · Block
2026-10-28CloudflareCVE-2026-115560
CVE-2026-115560 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560) #6
Updated · Block
2026-10-26FastlyGoogle Brotli Unchecked Return Value Vulnerability
CVE-2026-111497 · Added virtual patch for CVE-2026-111497 (Node2Shell, HTTP2Shell)
New rule
2026-10-25CloudflareGoogle Brotli Unchecked Return Value Vulnerability
CVE-2026-111497 · Brotli - Request Content-Encoding - CVE:CVE-2026-111497
New rule · Log
2026-10-25CloudflareGoogle Brotli Unchecked Return Value Vulnerability
CVE-2026-111497 · Next.js - Image Optimizer Path - CVE:CVE-2026-111497
New rule · Log
2026-10-22F5PHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution (2)
Updated
2026-10-22F5PHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution (3)
Updated
2026-10-22AWSPHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP2Shell_BODY_Extended
Updated
2026-10-22AWSPHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP2Shell_BODY_Extended
Updated
2026-10-22AWSPHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP2Shell_BODY_Extended
New rule
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #6
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #6
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #7
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #7
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619)
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619)
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #2
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #2
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #5
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #5
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #6
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #6
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #7
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #7
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619)
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619)
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #2
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #2
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #3
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #4
Updated
2026-10-22CloudflarePHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #5
Updated
2026-10-22CloudflarePHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #5
Updated
2026-10-21F5Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users
CVE-2026-44825 · Apache Solr Authentication Bypass (2)
New rule
2026-10-21F5Access control filter bypass allows unauthorised access to APIs
CVE-2026-86206 · N-central Authentication Bypass
New rule
2026-10-21F5Authentication bypass leads to unauthorised access to N-central
CVE-2026-86207 · N-central Authentication Bypass
New rule
2026-10-21F5PaperCut MF/NG Improper Access Control Vulnerability
CVE-2023-27350 · PaperCut NG Authentication Bypass (2)
New rule
2026-10-21F5Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
CVE-2026-104935 · Ivanti Pulse Connect Secure Authentication Bypass (2)
New rule
2026-10-21F5Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise
CVE-2026-76268 · Splunk Enterprise Remote Code Execution (2)
New rule
2026-10-21F5Ahsay AhsayCBS Improper Authentication Vulnerability
CVE-2026-105133 · AhsayCBS Authentication Bypass
New rule
2026-10-21F5Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-62911 · Microsoft Exchange MRSProxy Authentication Bypass
New rule
2026-10-21F5OpenCTI privilege escalation and unauthenticated access via default admin account
CVE-2026-27960 · OpenCTI Authentication Bypass
New rule
2026-10-21F5MantisBT SOAP API has an authentication bypass vulnerability on MySQL
CVE-2026-30849 · Mantis Bug Tracker Authentication Bypass
New rule
2026-10-21F5WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability
CVE-2026-39468 · WordPress Meta Box Arbitrary File Deletion
New rule
2026-10-21F5Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Value
CVE-2026-8713 · WordPress Avada Fusion Builder Arbitrary File Deletion
New rule
2026-10-21F5Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
CVE-2026-94543 · Next.js Cache Poisoning (2)
New rule
2026-10-21F5CVE-2019-14793
CVE-2019-14793 · WordPress Meta Box Arbitrary File Deletion (2)
New rule
2026-10-21F5Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … 10.8.7 - Unauthenticated Authentication Bypass via Hardcoded Backdoor in '_wplogin' Parameter
CVE-2026-18072 · WordPress Advanced Responsive Video Embedder Backdoor
New rule
2026-10-21F5WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
CVE-2026-32475 · WordPress Elementor Pro Arbitrary File Upload
New rule
2026-10-21F5Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
CVE-2025-20282 · Cisco ISE API Unauthenticated File Upload
New rule
2026-10-21F5Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)
CVE-2026-14894 · WordPress Super Forms Arbitrary File Upload
New rule
2026-10-21F5WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability
CVE-2026-27540 · WordPress Wholesale Lead Capture Arbitrary File Upload
New rule
2026-10-21F5Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
CVE-2026-85097 · WordPress Bricksforge Arbitrary File Upload
New rule
2026-10-21F5CVE-2026-67401
CVE-2026-67401 · cPanel SQL Injection (2)
New rule
2026-10-21F5Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
CVE-2026-89026 · Issabel PBXAPI Command Execution
New rule
2026-10-21F5Citrix NetScaler Improper Input Validation Vulnerability
CVE-2026-88771 · Citrix Netscaler Remote Code Execution (2)
New rule
2026-10-21F5PaperCut NG/MF: Remote Code Execution via Scan2Fax
CVE-2026-82077 · PaperCut NG/MF Remote Command Execution
New rule
2026-10-21F5PHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution (2)
New rule
2026-10-21F5WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-93485 · WordPress Theme Preview XSS
New rule
2026-10-21F5Satori-generated SVG has improper escaping
CVE-2026-94545 · Next.js Open Graph Remote Code Execution
New rule
2026-10-21F5Librsvg: use-after-free when xml includes have duplicated entities
CVE-2026-96889 · Next.js Open Graph Remote Code Execution
New rule
2026-10-21F5Microsoft SharePoint Code Injection Vulnerability
CVE-2026-65660 · Microsoft SharePoint ToolPane Remote Code Execution (2)
New rule
2026-10-21F5The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution
CVE-2026-78006 · WordPress The Events Calendar Unauthenticated RCE
New rule
2026-10-21F5The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation
CVE-2026-78159 · WordPress The Events Calendar Unauthenticated RCE
New rule
2026-10-21F5Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators
CVE-2026-58138 · Orkes Conductor Remote Code Execution
New rule
2026-10-21F5Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing
CVE-2026-19092 · WordPress Tutor LMS PHP Function Invocation
New rule
2026-10-21F5Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key
CVE-2026-61500 · Rejetto HFS Remote Code Execution (2)
New rule
2026-10-21F5Zammad GmbH Zammad Session Fixation Vulnerability
CVE-2026-102489 · Zammad Remote Code Execution
New rule
2026-10-21F5CVE-2021-3287
CVE-2021-3287 · ManageEngine OpManager Unsafe Deserialization
New rule
2026-10-21F5CVE-2020-28653
CVE-2020-28653 · ManageEngine OpManager Unsafe Deserialization
New rule
2026-10-21F5PHP Stale Internal Request-State Vulnerability
CVE-2026-109619 · PHP Remote Code Execution
New rule
2026-10-21F5CVE-2026-90817
CVE-2026-90817 · REDCap Remote Code Execution
New rule
2026-10-21F5PHP Memory Corruption Vulnerability
CVE-2026-109618 · PHP Remote Code Execution (3)
New rule
2026-10-21F5PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
CVE-2026-81578 · PaperCut NG/MF Authentication Bypass
Updated
2026-10-21F5PaperCut NG/MF Unsafe Reflection Vulnerability
CVE-2026-82078 · PaperCut NG/MF Authentication Bypass
Updated
2026-10-21F5SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVE-2026-83548 · SonicWall SMA1000 SSRF
Updated
2026-10-21F5CVE-2026-102255
CVE-2026-102255 · SonicWall SMA1000 SSRF
Updated
2026-10-21F5CVE-2005-1921
CVE-2005-1921 · xmlrpc.php sensitive method post attempt
Updated
2026-10-21F5CVE-2025-54352
CVE-2025-54352 · xmlrpc.php sensitive method post attempt
Updated
2026-10-21F5Cache Poisoning in next.js
CVE-2024-46982 · Next.js Cache Poisoning
Updated
2026-10-21F5Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
CVE-2022-47966 · Zoho ManageEngine SAMLResponse RCE
Updated
2026-10-21F5Langflow Missing Authentication Vulnerability
CVE-2025-3248 · Langflow Code Injection
Updated
2026-10-21F5IBM Langflow Code Injection Vulnerability
CVE-2026-9198 · Langflow Code Injection
Updated