waf-release-changelog.mdx (#30751)

* Update scheduled-waf-release.mdx

* Create 2026-05-11-waf-release.mdx

* Update scheduled-waf-release.mdx

Author: rag-cf

src/content/changelog/waf/2026-05-11-waf-release.mdx

@@ -0,0 +1,48 @@
+---
+title: "WAF Release - 2026-05-11"
+description: Cloudflare WAF managed rulesets 2026-05-11 release
+date: 2026-05-11
+---
+
+import { RuleID } from "~/components";
+
+**Key Findings**
+
+- Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage.
+
+
+**Continuous Rule Improvements**
+
+We are continuously refining our managed rules to provide more resilient protection and deeper insights into attack patterns. To ensure an optimal security posture, we recommend consistently monitoring the Security Events dashboard and adjusting rule actions as these enhancements are deployed.
+
+
+<table style="width: 100%">
+  <thead>
+		<tr>
+			<th>Ruleset</th>
+			<th>Rule ID</th>
+			<th>Legacy Rule ID</th>
+			<th>Description</th>
+			<th>Previous Action</th>
+			<th>New Action</th>
+			<th>Comments</th>
+		</tr>
+  </thead>
+	<tbody>
+		<tr>
+			<td>Cloudflare Managed Ruleset</td>
+			<td>
+				<RuleID id="23ac4a9e53f94467ba470c9468b3c389" />
+			</td>
+			<td>N/A</td>
+			<td>Remote Code Execution - Java Deserialization - Body - Beta</td>
+			<td>Block</td>
+			<td>Disabled</td>
+			<td>
+				This is a new detection. This rule is merged into the original rule
+				"Remote Code Execution - Java Deserialization" (ID:{" "}
+				<RuleID id="36b0532eb3c941449afed2d3744305c4" />).
+			</td>
+		</tr>
+	</tbody>
+</table>

src/content/changelog/waf/scheduled-waf-release.mdx

@@ -1,7 +1,7 @@
 ---
-title: WAF Release - Scheduled changes for 2026-05-11
-description: WAF managed ruleset changes scheduled for 2026-05-11
-date: 2026-05-04
+title: WAF Release - Scheduled changes for 2026-05-18
+description: WAF managed ruleset changes scheduled for 2026-05-18
+date: 2026-05-11
 publish_future_dated_entry: true
 ---
 
@@ -21,45 +21,19 @@ import { RuleID } from "~/components";
 	</thead>
 	<tbody>
 		<tr>
-			<td>2026-05-04</td>
 			<td>2026-05-11</td>
+			<td>2026-05-18</td>
 			<td>Disabled</td>
 			<td>N/A</td>
 			<td>
-				<RuleID id="23ac4a9e53f94467ba470c9468b3c389" />
+				<RuleID id="bcdcec3ea63a480896513dc39e9c068d" />
 			</td>
-			<td>Remote Code Execution - Java Deserialization - Body - Beta</td>
+			<td>Sitecore - Cache Poisoning - CVE:CVE-2025-53693</td>
 			<td>
 				This is a new detection. This rule will be merged into the original rule
 				"Remote Code Execution - Java Deserialization" (ID:{" "}
-				<RuleID id="36b0532eb3c941449afed2d3744305c4" />)
+				<RuleID id="d1bd7563e6254db48ce703807c5b669c" />)
 			</td>
-		</tr>
-		<tr>
-			<td>2026-05-04</td>
-			<td>2026-05-11</td>
-			<td>Disabled</td>
-			<td>N/A</td>
-			<td>
-				<RuleID id="08dc41aba360462497aed46b519e9982" />
-			</td>
-			<td>Remote Code Execution - Java Deserialization - Headers</td>
-			<td>
-				This is a new detection.
-			</td>
-		</tr>
-        <tr>
-			<td>2026-05-04</td>
-			<td>2026-05-11</td>
-			<td>Disabled</td>
-			<td>N/A</td>
-			<td>
-				<RuleID id="f9a1690105e44d08a74762467fe726a2" />
-			</td>
-			<td>Remote Code Execution - Java Deserialization - URI</td>
-			<td>
-				This is a new detection.
-			</td>
-		</tr>		
+		</tr>	
 	</tbody>
 </table>