CloudflareCloudflare WAF adds block for Next.js Image Optimizer AVIF RCE and refines CVE‑2026‑75604 rule3 min read·1mo ago·via Cloudflare Application Security