Added system lists

ngwaf-announcementsadded

System lists are now available in the Next-Gen WAF. These are sets of data provided by Fastly that can be referenced in your rules at both the corp (account) and site (workspace) level. System lists cannot be modified.

For an example request rule that uses a system list, check out Blocking attacks from malicious IP addresses.

Prior change: Added virtual patch for CVE-2026-23869 (React Server Components DoS)