This is now possible using AWS Language Transform macros. See: https://awstip.com/dynamically-creating-security-group-ingress-rules-in-aws-cloudformation-bb3f48b049ba for details.
In summary, you can use the Fn::Foreach intrinsic function to add multiple ingress rules to your Security group