---
title: cf.waf.score.rce · Cloudflare Ruleset Engine docs
description: An attack score from 1–99 classifying the command injection or Remote Code Execution (RCE) attack vector.
source_url:
  html: https://a74404c8.preview.developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.score.rce/index.md
  md: https://a74404c8.preview.developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.score.rce/
---

# cf.waf.score.rce

`cf.waf.score.rce` Number

An attack score from 1–99 classifying the command injection or Remote Code Execution (RCE) attack vector.

Requires a Cloudflare Enterprise plan. You must also enable [attack score detection](https://developers.cloudflare.com/waf/detections/attack-score/).

Categories:

* Request
