WAF - WAF Release - 2026-09-08

<p>This release enhances detection logic for existing rules targeting Next.js remote code execution (RCE) vulnerabilities by consolidating active beta rules into baseline signatures.</p> <table style="width: 100%"><thead><tr><th>Ruleset</th><th>Rule ID</th><th>Legacy Rule ID</th><th>Description</th><th>Previous Action</th><th>New Action</th><th>Comments</th></tr></thead><tbody><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="d5d9f863e50b416faf43934dc76ba662"><button type="button" title="Copy rule ID" aria-label="Copy rule ID d5d9f863e50b416faf43934dc76ba662" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...c76ba662</span></button></span></td><td>N/A</td><td>Next.js - Image Optimizer Remote Code Execution via Crafted AVIF - Beta</td><td>Log</td><td>Block</td><td>This rule is merged into the original rule &quot;Next.js - Image Optimizer Remote Code Execution via Crafted AVIF&quot; (ID: <span class="rule-id" data-rule-id="18b22b0bd423423c945b3a0180256efe"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 18b22b0bd423423c945b3a0180256efe" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...80256efe</span></button></span>).</td></tr><tr><td>Cloudflare Managed Ruleset</td><td><span class="rule-id" data-rule-id="771ac3761dcd485cb0e91ea0208457cf"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 771ac3761dcd485cb0e91ea0208457cf" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...208457cf</span></button></span></td><td>N/A</td><td>Next.js - Remote Code Execution - CVE:CVE-2026-75604 - Beta</td><td>Log</td><td>Block</td><td>This rule is merged into the original rule &quot;Next.js - Remote Code Execution - CVE:CVE-2026-75604&quot; (ID: <span class="rule-id" data-rule-id="2b6b94ec864d47f99630ecf72ca6cce3"><button type="button" title="Copy rule ID" aria-label="Copy rule ID 2b6b94ec864d47f99630ecf72ca6cce3" class="border-border bg-muted hover:border-foreground/30 hover:bg-accent inline-flex cursor-copy items-center rounded-md border px-1.5 py-0.5 transition-colors duration-150"><span class="font-mono text-[0.8125rem] font-medium">...2ca6cce3</span></button></span>).</td></tr></tbody></table>