WAF - WAF Release - 2026-09-15

This release introduces new threat detections to enhance protection against command injection attempts, Server-Side Request Forgery (SSRF) targeting cloud metadata, and information disclosure within version control history. Ruleset Rule ID Legacy Rule ID Description Previous Action New Action Comments Cloudflare Managed Ruleset …ca453d31 N/A SSRF - Cloud - 3 Log Block This is a new detection. Cloudflare Managed Ruleset …e540f17f N/A Version Control - Information Disclosure - Beta Log Block This rule is merged into the original rule “Version Control - Information Disclosure” (ID: …0550c52