#waf
Loot, blog posts and adjacent themes connected to this topic. Follow the tag to keep it in your orbit.
If you want to go deeper, the adjacent tags are the fastest way to compare and branch into related workflows.
More from this topic
When the community shares matching finds, they will appear here. For now, browse all loot or submit the first drop.
Related reads
Cloudflare moves Next.js RCE defenses into baseline WAF rules
Cloudflare has promoted two Next.js remote-code-execution detections from beta into baseline managed WAF signatures. The change strengthens …
Vercel WAF now protects Blob stores in beta
Vercel has extended its Web Application Firewall to Vercel Blob stores in beta, letting teams apply deny, challenge, and rate-limit rules to…
Cloudflare ships emergency WAF rules for active RCE and SQLi attacks
Cloudflare's July 17 emergency WAF release adds block-mode detections for active unauthenticated RCE and SQL injection exploitation in popul…
Check Cloudflare WAF Logs Before Citrix and Kemp Exploit Traffic Turns Noisy
Cloudflare has scheduled new WAF detections for Citrix NetScaler CVE-2026-8451 and Progress Kemp LoadMaster CVE-2026-8037, giving defenders …
Check FortiSandbox Exposure: Cloudflare Adds CVE-2026-39813 WAF Logging
Cloudflare scheduled a new managed WAF detection for Fortinet FortiSandbox CVE-2026-39813 on June 29, 2026. The rule starts in log mode, so …
Harden Ghost sites: Cloudflare WAF now blocks the CVE-2026-26980 SQL injection path
Cloudflare added managed WAF protection for Ghost CMS CVE-2026-26980, a critical Content API SQL injection fixed in Ghost 6.19.1. Patch firs…
Block Ivanti Sentry CVE-2026-10520 faster: Cloudflare WAF adds managed protection
Cloudflare has added a managed WAF rule for CVE-2026-10520, a critical Ivanti Sentry OS command injection flaw that CISA and NVD list as act…