Catalog / Cloudflare Developer Platform

WAF - WAF Release - Scheduled changes for 2026-09-22

todayaddedOriginal notes
Announcement DateRelease DateRelease BehaviorLegacy Rule IDRule IDDescriptionComments
2026-09-152026-09-22LogN/A...0f0313d6SSRF - Block jar HTTP loopback payload

This is a new detection.

2026-09-152026-09-22LogN/A...5f21b651SSRF - Cloud,Link-Local non-standard IP notation

This is a new detection.

2026-09-152026-09-22LogN/A...75cd912aSSRF - Local non-standard IP notation

This is a new detection.

2026-09-152026-09-22LogN/A...a1ba83f6SSTI - Jinja Dangerous Globals Chain

This is a new detection.