WAF - WAF Release - Scheduled changes for 2026-09-08

Announcement Date Release Date Release Behavior Legacy Rule ID Rule ID Description Comments 2026-09-01 2026-09-08 Log N/A …c76ba662 Next.js - Image Optimizer Remote Code Execution via Crafted AVIF - Beta This rule will be merged into the original rule “Next.js - Image Optimizer Remote Code Execution via Crafted AVIF” (ID: …80256efe ). 2026-09-01 2026-09-08 Log N/A …208457cf Next.js - Remote Code Execution - CVE:CVE-2026-75604 - Beta This rule will be merged into the original rule “Next.js - Remote Code Execution - CVE:CVE-2026-75604” (ID: …2ca6cce3 ).