WAF - WAF Release - 2026-02-02
This week’s release introduces new detections for CVE-2025-64459 and CVE-2025-24893. Key Findings CVE-2025-64459: Django versions prior to 5.1.14, 5.2.8, and 4.2.26 are vulnerable to SQL injection via crafted dictionaries passed to QuerySet methods and the Q() class.
Also shipped Feb 2, 2026Cloudflare in February 2026 →
Support for NVIDIA RTX PRO 6000 Blackwell GPU is in Preview
Support for NVIDIA RTX PRO 6000 Blackwell GPU is in Preview . For more information, see GPU support for services , jobs , and worker pools .
PostHog × Vercel: feature flags, minus the plumbing
PostHog has released an integration with Vercel that syncs feature flags and experiments into Vercel's native Flags system, automating credential management.
Synthetic Monitoring: Secrets Management General Availability
We’re excited to announce the General Availability release of secrets management for Synthetic Monitoring, available to all Grafana Cloud users. Secrets management gives you a centralized place to securely store sensitive data like API keys, passwords, and tokens.
Dataflow Managed I/O now supports rolling upgrades for streaming jobs
Dataflow Managed I/O now supports rolling upgrades for streaming jobs. With this feature, Dataflow upgrades your Managed I/O connectors in running pipelines as new connector versions become available. For more information, see Automatic upgrades .
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Email security - Improved Accessibility and Search for Monitoring
We have updated the Monitoring page to provide a more streamlined and insightful experience for administrators, improving both data visualization and dashboard accessibility. Enhanced Visual Layout : Optimized contrast and the introduction of stacked bar charts for clearer data visualization and trend analysis.
Agents, Workflows - Agents SDK v0.3.7: Workflows integration, synchronous state, and scheduleEvery()
The latest release of the Agents SDK ↗ brings first-class support for Cloudflare Workflows , synchronous state management, and new scheduling capabilities. Cloudflare Workflows integration Agents excel at real-time communication and state management. Workflows excel at durable execution.
R2 - Improve Global Upload Performance with R2 Local Uploads - Now in Open Beta
Local Uploads is now available in open beta. Enable it on your R2 bucket to improve upload performance when clients upload data from a different region than your bucket. With Local Uploads enabled, object data is written to storage infrastructure near the client, then asynchronously replicated to your bucket.
Security Center - Threat actor identification with "also known as" aliases
Identifying threat actors can be challenging, because naming conventions often vary across the security industry. To simplify your research, Cloudflare Threat Events now include an Also known as field, providing a list of common aliases and industry-standard names for the groups we track.
AI Crawl Control - New reference documentation
New reference documentation is now available for AI Crawl Control: GraphQL API reference , Query examples for crawler requests, top paths, referral traffic, and data transfer. Includes key filters for detection IDs, user agents, and referrer domains.
Queues - Cloudflare Queues now available on Workers Free plan
Cloudflare Queues is now part of the Workers free plan, offering guaranteed message delivery across up to 10,000 queues to either Cloudflare Workers or HTTP pull consumers . Every Cloudflare account now includes 10,000 operations per day across reads, writes, and deletes. For more details on how each operation is defined, refer to Queues pricing ↗ .
Workflows, Workers - Visualize your Workflows in the Cloudflare dashboard
Cloudflare Workflows now automatically generates visual diagrams from your code Your Workflow is parsed to provide a visual map of the Workflow structure, allowing you to: Understand how steps connect and execute Visualize loops and nested logic Follow branching paths for conditional logic You can collapse loops and nested logic to see the high-level flow...
KV - Reduced minimum cache TTL for Workers KV to 30 seconds
The minimum cacheTtl parameter for Workers KV has been reduced from 60 seconds to 30 seconds. This change applies to both get() and getWithMetadata() methods. This reduction allows you to maintain more up-to-date cached data and have finer-grained control over cache behavior.