full transaction detection
AssessTechniques
A WAF detection approach that combines request and response signals within one HTTP transaction.
Why it's here
Placed in Assess: 2 article(s) of evidence from 2 source(s), led by security coverage, with 2 in the last 30 days. Confidence 37%.
Evidence (2)
- 8Cloudflare Blog·10/21/2026securityCloudflare WAF Adds Full Transaction Detection and Response Rules
Cloudflare is expanding its WAF with full transaction detections and response rules, allowing it to evaluate an HTTP request together with the origin's response to better identify exploitation. The company says the features are generally available to all customers, including Free plans, with initial managed protections aimed at the php2shell vulnerability.
- 8Hacker News·10/21/2026securityCloudflare rolls out protections for php2shell PHP flaws
Cloudflare says it deployed WAF mitigations for the php2shell vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, before public disclosure and enabled them by default for customers using its WAF. The flaws affect PHP 5.4 and later and can lead to denial of service, remote code execution, or data exposure, so Cloudflare is also monitoring for payload variations while urging customers to patch PHP.