Releasesby GlyphWAF - WAF Release - 2026-03-30
This week's release introduces new detections for a critical authentication bypass vulnerability in Fortinet products (CVE-2025-59718), alongside three new generic detection rules designed to identify and block HTTP Parameter Pollution attempts.
Also shipped Mar 30, 2026Cloudflare in March 2026 →
AI Image Tools now in FigJam, Slides, & Buzz
AI image tools like Expand, Erase, and Isolate are now in FigJam, Slides, and Buzz (beta), with Vectorize available in Slides and Buzz.
Updated visualization suggestions now generally available
In January 2026, we announced improvements to visualization suggestions in public preview. These changes included higher quality suggestions leveraging information provided by data sources, as well as minor user interface updates. These improvements are now generally available.
Edit guide and survey positions without leaving Preview mode
What it is: The Guide Preview now includes an Edit button. Click it to adjust form factor options like position and layout, then save to see changes reflected in both the Preview and the Dashboard right away.
Modal 1.4.1
- We're introducing a concept of "readiness probes" for modal.Sandbox. This feature lets you configure a readiness check on a TCP port (modal.Probe.with_tcp()) or by executing a process (modal.Probe.with_exec()).
Streaming: Server-Sent Events (SSE) Streaming responses for Chat Completions (/v1/chat/completions) and...
Streaming: Server-Sent Events (SSE) Streaming responses for Chat Completions (/v1/chat/completions) and Completions (/v1/completions) now emit a standard data: [DONE] SSE event at the end of the stream, following the SSE standard (see the living specification). The [DONE] marker is guaranteed to appear exactly once and is always the last event in the stream.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
DNS - Internal DNS - now in open beta
Internal DNS is now in open beta. Who can use it? Internal DNS is bundled as a part of Cloudflare Gateway and is now available to every Enterprise customer with one of the following subscriptions: Cloudflare Zero Trust Enterprise Cloudflare Gateway Enterprise To learn more and get started, refer to the Internal DNS documentation .
Workflows, Workers - All Wrangler commands for Workflows now support local development
All wrangler workflows commands now accept a --local flag to target a Workflow running in a local wrangler dev session instead of the production API. You can now manage the full Workflow lifecycle locally, including triggering Workflows, listing instances, pausing, resuming, restarting, terminating, and sending events: npx wrangler workflows list --local...
AI Search - Create, manage, search AI Search instances with Wrangler CLI
AI Search supports a wrangler ai-search command namespace. Use it to manage instances from the command line. The following commands are available: Command Description wrangler ai-search create Create a new instance with an interactive wizard wrangler ai-search list List all instances in your account wrangler ai-search get Get details of a specific instance...
Cloudflare One, Access, Gateway - Logs UI refresh
Access authentication logs and Gateway activity logs (DNS, Network, and HTTP) now feature a refreshed user interface that gives you more flexibility when viewing and analyzing your logs. The updated UI includes: Filter by field - Select any field value to add it as a filter and narrow down your results.
Radar - Routing Section Expansion on Cloudflare Radar
Radar now features an expanded Routing section ↗ with dedicated sub-pages, providing a more organized and in-depth view of the global routing ecosystem. This restructuring lays the groundwork for additional routing features and widgets coming in the near future.
Rules - New QUIC RTT and delivery rate fields
Two new fields are now available in rule expressions that surface Layer 4 transport telemetry from the client connection. Together with the existing cf.timings.client_tcp_rtt_msec field, these fields give you a complete picture of connection quality for both TCP and QUIC traffic , enabling transport-aware rules without requiring any client-side changes.
Workers - Deploy Hooks are now available for Workers Builds
Workers Builds now supports Deploy Hooks , trigger builds from your headless CMS, a Cron Trigger, a Slack bot, or any system that can send an HTTP request. Each Deploy Hook is a unique URL tied to a specific branch. Send it a POST and your Worker builds and deploys.
Workers - New L4 transport telemetry fields in Workers
Three new properties are now available on request.cf in Workers that expose Layer 4 transport telemetry from the client connection. These properties let your Worker make decisions based on real-time connection quality signals , such as round-trip time and data delivery rate , without requiring any client-side changes.