Skip to content
Cloud ChangelogAnnouncements from AWS, Google Cloud, Azure, Cloudflare and the main AI providers in one searchable changelog, with daily, weekly and monthly digests.
Get the digest
Back to feed

September 8, 2026 · Cloudflare

WAF - WAF Release - 2026-09-08

This release enhances detection logic for existing rules targeting Next.js remote code execution (RCE) vulnerabilities by consolidating active beta rules into baseline signatures.

RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionCommentsCloudflare Managed Ruleset...c76ba662N/ANext.js - Image Optimizer Remote Code Execution via Crafted AVIF - BetaLogBlockThis rule is merged into the original rule "Next.js - Image Optimizer Remote Code Execution via Crafted AVIF" (ID: ...80256efe).Cloudflare Managed Ruleset...208457cfN/ANext.js - Remote Code Execution - CVE:CVE-2026-75604 - BetaLogBlockThis rule is merged into the original rule "Next.js - Remote Code Execution - CVE:CVE-2026-75604" (ID: ...2ca6cce3).
Read on developers.cloudflare.com
Cloud Changelog

Announcements from AWS, Google Cloud, Azure, Cloudflare and the main AI providers in one searchable changelog, with daily, weekly and monthly digests.

Cloud Changelog is an independent site. It is not affiliated with or endorsed by Amazon Web Services, Google, Microsoft, Cloudflare, OpenAI, Anthropic, Mistral AI or xAI. Their names and trademarks belong to their owners.