WAF - WAF Release - 2026-05-04
BetaUnverifiedAdded Sep 24, 2026
This week's release focuses on new detections to expand coverage across command injection, SQL injection, PHP object injection, remote code execution, and XSS attack vectors. Key Findings Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage.
Topics: Vector search, SQL, Governance, Security, BI
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| May 4 | Cache - Pingora now powers Cloudflare's cacheunverified Update | Update |
| May 4 | Cloudflare Fundamentals - Keyboard shortcuts for the Cloudflare dashboardunverified Update | Update |
| May 4 | Pipelines - Pipelines and R2 Data Catalog now supported in Terraformunverified Update | Update |
| May 4 | Radar - New routing widgets on Cloudflare Radarunverified Update | Update |
| May 6 | Email security - Cloudy Summaries in PhishNet O365unverified Update | Update |
| May 6 | Cloudflare One - IPv6 CIDR routes for Cloudflare Meshunverified Update | Update |
| May 6 | Radar - TLD Nameserver Performance in Cloudflare Radarunverified Update | Update |
| May 6 | Security Center - TAXII support added to Threat Events APIunverified Update | Update |
Also shipped on May 4, 2026
Cloudflare in May 2026| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| May 4 |  Sentry | Cross-Event Querying is now Generally Availableunverified | Sentry | GA |
| May 4 |  Shopify | Add actor field to subscription contract and billing attempt mutationsunverified | Shopify developer platform | Pricing |
| May 4 | Shopify | Default value of `appliesOnSubscription` changed to `true` for app discount inputsunverified | Shopify developer platform | Pricing |
| May 4 |  Replicate | Cog 0.19.3unverified | Cog | Update |
| May 4 |  Deepgram | Aura-2 Voice Controls , Speed and Pronunciationunverified | Deepgram | Update |
| May 4 | Deepgram | Voice Agentunverified | Deepgram | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.