Skip to content

WAF - WAF Release - 2026-06-15

UpdateUnverifiedAdded Sep 24, 2026

This week's release introduces new managed protection to address a critical SQL injection vulnerability in Ghost CMS (CVE-2026-26980) and a new generic rule designed to identify and block sophisticated SQL Injection (SQLi) bypass attempts leveraging obfuscated boolean logic.

Topics: SQL, Security, Observability, Developer tools

Cloudflare's release notes

More Cloudflare developer platform releases

Every Cloudflare developer platform release

Also shipped on Jun 15, 2026

Cloudflare in June 2026

Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.

New releases by email

Tuesday mornings: the week's data, AI and developer-tools releases, only in weeks when something shipped.

Double opt-in. Unsubscribe any time.