All news
2 articles- blogCloudflare Blog·21 Oct 20264.4Cloudflare rolled out WAF rules for the php2shell PHP RCE flaws and notes a related session upload bug, CVE-2026-115560, that affects fully patched PHP.
- blogCloudflare Blog·21 Oct 20263.4Cloudflare WAF now inspects each request together with its response to spot successful exploitation, and adds response rules.