WAF - WAF Release - 2026-01-26
UpdateUnverifiedAdded Sep 24, 2026
This week’s release introduces new detections for denial-of-service attempts targeting React CVE-2026-23864 ( https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗ ). Key Findings CVE-2026-23864 ( https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗ ) affects react-server-dom-parcel , react-server-dom-turbopack , and react-server-dom-webpack packages.
Topics: Security
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Jan 27 | Cloudflare One Client - WARP client for Windows (version 2026.1.89.1)unverified Beta | Beta |
| Jan 27 | Cloudflare One Client - WARP client for macOS (version 2026.1.89.1)unverified Beta | Beta |
| Jan 27 | Cloudflare One, Cloudflare WAN - Configure Cloudflare source IPs (beta)unverified Beta | Beta |
| Jan 27 | Cloudflare Fundamentals - Added Timezone preferences settingsunverified Update | Update |
| Jan 27 | Rules - Control request and response body buffering in Configuration Rulesunverified Update | Update |
| Jan 28 | Workers AI - Launching FLUX.2 [klein] 9B on Workers AIunverified Update | Update |
| Jan 23 | Cloudflare Fundamentals - New 2FA Experience for Loginunverified Update | Update |
| Jan 23 | Pages - Increased Pages file limit to 100,000 for paid plansunverified Update | Update |
Also shipped on Jan 26, 2026
Cloudflare in January 2026| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Jan 26 |  Netlify | Security Update: DoS vulnerability in Next.js and React Server Componentsunverified | Netlify | Preview |
| Jan 26 |  DuckDB | DuckDB 1.4.4 Bugfix Releaseunverified | DuckDB | Update |
| Jan 26 |  Tailscale | Tailscale v1.94.1unverified | Tailscale | Update |
| Jan 26 |  Figma | FigJam diagramming in Claudeunverified | Figma | Update |
| Jan 26 |  Expo | Compiler cache for builds and Workflowsunverified | Expo | Update |
| Jan 26 |  Resend | Webhooks Ingesterunverified | Resend | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.