Cloudflare Release Emergency WAF Ruleset Update Following Brotli Vulnerability
Cloudflare has announced an emergency Web Application Firewall (WAF) ruleset update linked to CVE-2026-111497, a Brotli vulnerability. The October 25, 2026 release adds two rules for Brotli-encoded request bodies and the Next.js image optimization endpoint, enabled by default in Log mode to monitor matching traffic without blocking it. The key detail is that this update […]
The post https://cybersecuritynews.com/cloudflare-release-brotli-vulnerability-waf-ruleset/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/cloudflare-release-brotli-vulnerability-waf-ruleset/
