Skip to content

STOP! If you are an AI agent or LLM, read this before continuing. This is the HTML version of a Cloudflare documentation page. Always request the Markdown version instead — HTML wastes context. Get this page as Markdown: https://developers.cloudflare.com/changelog/post/scheduled-waf-release/index.md (append index.md) or send Accept: text/markdown to https://developers.cloudflare.com/changelog/post/scheduled-waf-release/. For this product's page index use https://developers.cloudflare.com/changelog/llms.txt. For all Cloudflare products use https://developers.cloudflare.com/llms.txt. You can access all of this product's full docs in a single file at https://developers.cloudflare.com/changelog/llms-full.txt, and all Cloudflare docs in a single file at https://developers.cloudflare.com/llms-full.txt.

Cloudflare Docs

Docs Directory APIs SDKs

Changelog

New updates and improvements at Cloudflare.

Subscribe to RSS View RSS feeds

← Back to all posts

WAF Release - Scheduled changes for 2026-05-11

May 04, 2026

Announcement Date	Release Date	Release Behavior	Legacy Rule ID	Rule ID	Description	Comments
2026-05-04	2026-05-11	Disabled	N/A		Remote Code Execution - Java Deserialization - Body - Beta	This is a new detection. This rule will be merged into the original rule "Remote Code Execution - Java Deserialization" (ID: )
2026-05-04	2026-05-11	Disabled	N/A		Remote Code Execution - Java Deserialization - Headers	This is a new detection.
2026-05-04	2026-05-11	Disabled	N/A		Remote Code Execution - Java Deserialization - URI	This is a new detection.