WAF - WAF Release - 2026-09-01

This release introduces a new threat detection to enhance protection against SQL injection (SQLi) attempts exploiting complex query syntax. Key Findings SQLi Protection: Improved coverage for SQL injection patterns involving WHERE comparisons combined with WITH clauses. Ruleset Rule ID Legacy Rule ID Description Previous Action New Action Comments Cloudflare Managed Ruleset …bcfa0966 N/A SQLi - WHERE Comparison With WITH Clause Log Block This is a new detection.