Announcement Date Release Date Release Behavior Legacy Rule ID Rule ID Description Comments 2026-09-22 2026-09-29 Log N/A …cb14ded8 Broken Access Control - Directory Traversal This is a new detection. 2026-09-22 2026-09-29 Log N/A …0364bd7e HTTP Request Smuggling - Request Body Anomaly - Beta This rule will be merged into the original rule “HTTP/2 Request Smuggling - Request Body Anomaly” (ID: …1489d892 ). 2026-09-22 2026-09-29 Disabled N/A …d498a69a Command Injection - Generic 8 - body - Beta This rule will be merged into the original rule “Command Injection - Generic 8 - body” (ID: .
WAF - WAF Release - Scheduled changes for 2026-09-29
calendar_today
September 22, 2026
domain
cloudflare