WAF - WAF Release - 2026-02-02
UpdateUnverifiedAdded Sep 24, 2026
This week’s release introduces new detections for CVE-2025-64459 and CVE-2025-24893. Key Findings CVE-2025-64459: Django versions prior to 5.1.14, 5.2.8, and 4.2.26 are vulnerable to SQL injection via crafted dictionaries passed to QuerySet methods and the Q() class.
Topics: SQL, Security, Observability
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Feb 2 | Email security - Improved Accessibility and Search for Monitoringunverified Update | Update |
| Feb 3 | Agents, Workflows - Agents SDK v0.3.7: Workflows integration, synchronous state, and scheduleEvery()unverified Update | Update |
| Feb 3 | R2 - Improve Global Upload Performance with R2 Local Uploads - Now in Open Betaunverified Beta | Beta |
| Feb 3 | Security Center - Threat actor identification with "also known as" aliasesunverified Update | Update |
| Feb 4 | AI Crawl Control - New reference documentationunverified Update | Update |
| Feb 4 | Queues - Cloudflare Queues now available on Workers Free planunverified Update | Update |
| Feb 4 | Workflows, Workers - Visualize your Workflows in the Cloudflare dashboardunverified Beta | Beta |
| Jan 30 | KV - Reduced minimum cache TTL for Workers KV to 30 secondsunverified Update | Update |
Also shipped on Feb 2, 2026
Cloudflare in February 2026| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Feb 2 | Support for NVIDIA RTX PRO 6000 Blackwell GPU is in Preview unverified | Cloud Run | Preview | |
| Feb 2 | Support for PHP 8.5 runtime is in Preview unverified | Cloud Run | Preview | |
| Feb 2 | Synthetic Monitoring: Secrets Management General Availabilityunverified | Grafana Cloud | GA | |
| Feb 2 | Dataflow Managed I/O now supports rolling upgrades for streaming jobsunverified | Dataflow | Update | |
| Feb 2 | Send Metrics using the iOS SDKunverified | Sentry | Update | |
| Feb 2 | Figma for Government Mobile Appunverified | Figma | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.