---
title: WAF Release - 2025-10-03 · Changelog
description: Cloudflare WAF managed rulesets 2025-10-03 release
chatbotDeprioritize: true
source_url:
  html: https://developers.cloudflare.com/changelog/2025-10-03-waf-release/
  md: https://developers.cloudflare.com/changelog/2025-10-03-waf-release/index.md
---

# Changelog

New updates and improvements at Cloudflare.

[Subscribe to RSS](https://developers.cloudflare.com/changelog/rss/index.xml)\
[View all RSS feeds](https://developers.cloudflare.com/fundamentals/new-features/available-rss-feeds/)

![hero image](https://developers.cloudflare.com/_astro/hero.CVYJHPAd_ZEA2nF.svg)

[← Back to all posts](https://developers.cloudflare.com/changelog/)

## WAF Release - 2025-10-03

Oct 03, 2025

[WAF](https://developers.cloudflare.com/waf/)

**Managed Ruleset Updated**

This update introduces 21 new detections in the Cloudflare Managed Ruleset (all currently set to Disabled mode to preserve remediation logic and allow quick activation if needed). The rules cover a broad spectrum of threats - SQL injection techniques, command and code injection, information disclosure of common files, URL anomalies, and cross-site scripting.

| Ruleset | Rule ID | Legacy Rule ID | Description | Previous Action | New Action | Comments |
| - | - | - | - | - | - | - |
| Cloudflare Managed Ruleset | 0d02c2fb14eb4cec9c2e2b58d61fac74 | 100902 | Generic Rules - Command Execution - 2 | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | c3079865ce9a41368657026b514aeeb8 | 100908 | Generic Rules - Command Execution - 3 | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | 107ae2922b654bb28df7ca978d46a6f4 | 100910 | Generic Rules - Command Execution - 4 | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | 68bdb75ae6d24e139a83e5731bd0a329 | 100915 | Generic Rules - Command Execution - 5 | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | ea04bb580f7d400386c7dc1d5e51450a | 100899 | Generic Rules - Content-Type Abuse | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | 233364f656ff42b8acc41dcd7996012f | 100914 | Generic Rules - Content-Type Injection | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | 1aa695281c954513be3d003b93209312 | 100911 | Generic Rules - Cookie Header Injection | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | d9f9e4f5bf11489da52dccb40f373b3f | 100905 | Generic Rules - NoSQL Injection | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | 5a1897b714e044a887c0f3f078a0ed04 | 100913 | Generic Rules - NoSQL Injection - 2 | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | 4d6fd28df4f1494e95e70d2c5d649624 | 100907 | Generic Rules - Parameter Pollution | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | 61181e3af5304f7396c7d01cfd1c674e | 100906 | Generic Rules - PHP Object Injection | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | ed5190bfbe1b45a6a645126334c88168 | 100904 | Generic Rules - Prototype Pollution | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | 3ec33bc5ac77495a9f55020e3ab43f7e | 100897 | Generic Rules - Prototype Pollution 2 | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | c6d752c4909e4b7e8eff6c780d94ee22 | 100903 | Generic Rules - Reverse Shell | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | caf37e7800bb4635bcc2eefcd5add8e3 | 100909 | Generic Rules - Reverse Shell - 2 | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | 475d090baead467c88dfabbb565c78b0 | 100898 | Generic Rules - SSJI NoSQL | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | f4c7f98934264c9c937eec1212b837a0 | 100896 | Generic Rules - SSRF | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | efd01b814d144e90b36522b311c4fb00 | 100895 | Generic Rules - Template Injection | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | 00a9a0d663da4add95b863abd3ed0123 | 100895A | Generic Rules - Template Injection - 2 | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | e58c0fffee4f4374bd37f2577501a1d9 | 100912 | Generic Rules - XXE | N/A | Disabled | This is a New Detection |
| Cloudflare Managed Ruleset | ab09ba8d00eb4cdbb7a6a65ddc55cdb6 | 100900 | Relative Paths - Anomaly Headers | N/A | Disabled | This is a New Detection |
