Cloudflare has announced an emergency Web Application Firewall (WAF) ruleset update linked to CVE-2026-111497, a Brotli vulnerability. The October 25, 2026 release adds two rules for Brotli-encoded request bodies and the Next.js image optimization endpoint, enabled by default in Log mode to monitor matching traffic without blocking it. The key detail is that this update […]
This article has been indexed from Cyber Security News
Read the original article:
Cloudflare Release Emergency WAF Ruleset Update Following Brotli Vulnerability