WAF Release - Scheduled changes for 2026-09-29
Announcement Date Release Date Release Behavior Legacy Rule ID Rule ID Description Comments 2026-09-22 2026-09-29 Log N/A ...cb14ded8 Broken Access Control - Directory Traversal This is a new detection.
- WAF Release - Scheduled changes for 2026-09-29Beta
- Workers - Test every pull request in an isolated environment with Worker PreviewsPreview
- Workers Builds now supports Cursor OriginPreview
- Access - Automatically manage inactive Access service tokens
- Cloudflare One, Access - Private MCP server support for MCP server portals
- Rules - concat() now supports up to 32 arguments
- WAF Release - 2026-09-22