WAF - WAF Release - 2026-05-15 - Emergency
UpdateUnverifiedAdded Sep 24, 2026
This emergency release introduces two new rules to detect nginx heap buffer overflow and heap spray exploitation attempts targeting the rewrite module's is_args stale-state bug (CVE-2026-42945).
Topics: Security
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| May 15 | Hyperdrive, Workers - Hyperdrive exposes database connection pool size metricsunverified Update | Update |
| May 15 | R2 SQL - R2 SQL now supports JOINs, subqueries, and multi-table queriesunverified Update | Update |
| May 14 | Workers - New Domains tab in the Workers dashboardunverified Preview | Preview |
| May 13 | Agents, Workers - Agents SDK v0.12.4: chat recovery, routing retries, durable Think submissions, and Voice connection controlunverified Update | Update |
| May 13 | Logs - New Logpush datasets and updated fields across multiple Logpush datasets in Cloudflare Logsunverified Update | Update |
| May 13 | Cloudflare Web Analytics - /cdn-cgi/rum endpoint now returns 405 for non-POST requestsunverified Update | Update |
| May 18 | Artifacts - Manage Artifacts namespaces and repos with Wrangler CLIunverified Update | Update |
| May 18 | Cloudflare WAN, Magic Transit - Network Analytics support for Unified Routingunverified Beta | Beta |
Also shipped on May 15, 2026
Cloudflare in May 2026| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| May 15 |  Sigma Computing | What's new in Sigmaunverified | Sigma | GA |
| May 15 |  Railway | Railway for iOS, CLI metrics, Postgres PITRunverified | Railway | Preview |
| May 15 |  Grafana Labs | Alerting: the legacy Alertmanager UI is no longer available in Grafana Cloudunverified | Grafana Cloud | Deprecation |
| May 15 |  MotherDuck | - SCIM provisioning : MotherDuck now supports SCIM, so you can manage MotherDuck users from your identity...unverified | MotherDuck | Update |
| May 15 |  Deepgram | Numerals Support Now Available for 3 New Languages: Russian, Romanian, and Hebrew (Monolingual Models)unverified | Deepgram | Update |
| May 15 |  Neon | Neon Auth updates, Neon Auth MCP tools, and Stripe Projects guide release - May 15, 2026unverified | Neon | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.