WAF - WAF Release - 2026-09-15

This release introduces new threat detections to enhance protection against command injection attempts, Server-Side Request Forgery (SSRF) targeting cloud metadata, and information disclosure within version control history.

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Managed Ruleset	...ca453d31	N/A	SSRF - Cloud - 3	Log	Block	This is a new detection.
Cloudflare Managed Ruleset	...e540f17f	N/A	Version Control - Information Disclosure - Beta	Log	Block	This rule is merged into the original rule "Version Control - Information Disclosure" (ID: ...0550c529).
Cloudflare Managed Ruleset	...ba458b4b	N/A	Command Injection - Generic 10	Log	Block	This is a new detection.