Skip to content

[WAF] Add WAF release notes for 2026-07-01 and update scheduled changes #31798

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
ay-cf wants to merge 3 commits into from
Closed

[WAF] Add WAF release notes for 2026-07-01 and update scheduled changes #31798

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
f417415
[WAF] Add WAF release notes for 2026-07-01 and update scheduled changes
ay-cf Jun 30, 2026
89fdeb1
Update 2026-07-01-waf-release.mdx
ay-cf Jun 30, 2026
3b6ee3c
Update scheduled-waf-release.mdx
ay-cf Jun 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
55 changes: 55 additions & 0 deletions src/content/changelog/waf/2026-07-01-waf-release.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,55 @@
---
title: "WAF Release - 2026-07-01"
description: Cloudflare WAF managed rulesets 2026-07-01
date: 2026-07-01
---

import { RuleID } from "~/components";

This release adds targeted coverage for a path traversal flaw in Fortinet FortiSandbox (CVE-2026-39813) and transitions the Anomaly:Header:User-Agent - Fake Bing or MSN Bot rule action from Block to Disabled.
Comment thread
ay-cf marked this conversation as resolved.

**Key Findings**

- CVE-2026-39813: A path traversal vulnerability in Fortinet FortiSandbox allows remote, unauthenticated attackers to read arbitrary files from the underlying filesystem due to insufficient validation of user-supplied input paths.

<table style="width: 100%">
<thead>
<tr>
<th>Ruleset</th>
<th>Rule ID</th>
<th>Legacy Rule ID</th>
<th>Description</th>
<th>Previous Action</th>
<th>New Action</th>
<th>Comments</th>
</tr>
</thead>
<tbody>
<tr>
<td>Cloudflare Managed Ruleset</td>
<td>
<RuleID id="32075e19b1494117ac5915e8d84c92c9" />
</td>
<td>N/A</td>
<td>Fortinet FortiSandbox - Path Traversal - CVE:CVE-2026-39813</td>
<td>Log</td>
<td>Block</td>
<td>
This is a new detection.
</td>
</tr>
<tr>
<td>Cloudflare Managed Ruleset</td>
<td>
<RuleID id="ae20608d93b94e97988db1bbc12cf9c8" />
</td>
<td>N/A</td>
<td>Anomaly:Header:User-Agent - Fake Bing or MSN Bot</td>
<td>Enabled</td>
<td>Disabled</td>
<td>
We are changing the action for this rule from BLOCK to Disabled
Comment thread
ay-cf marked this conversation as resolved.
</td>
</tr>
</tbody>
</table>
19 changes: 4 additions & 15 deletions src/content/changelog/waf/scheduled-waf-release.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
---
title: WAF Release - Scheduled changes for 2026-06-29
description: WAF managed ruleset changes scheduled for 2026-06-29
date: 2026-06-23
publish_future_dated_entry: true
title: WAF Release - Scheduled changes for 2026-07-06
description: WAF managed ruleset changes scheduled for 2026-07-06
date: 2026-07-01
publish_future_dated_entry: false
---

import { RuleID } from "~/components";
Expand All @@ -21,17 +21,6 @@ import { RuleID } from "~/components";
</thead>
<tbody>
<tr>
<td>2026-06-23</td>
<td>2026-06-29</td>
<td>Log</td>
<td>N/A</td>
<td>
<RuleID id="32075e19b1494117ac5915e8d84c92c9" />
</td>
<td>Fortinet FortiSandbox - Path Traversal - CVE:CVE-2026-39813</td>
<td>
This is a new detection.
</td>
</tr>
</tbody>
</table>