Cloudflare WAF Update – New Block‑Mode Detections and Remote Code Execution Rule (Aug 2026)
On August 25 2026 Cloudflare released a WAF update that moves four new detections from Log to Block, merges a beta XSS rule into its stable counterpart, and adds a Generic Remote Code Execution rule in Block mode.