Releasesby GlyphWAF - WAF Release - 2026-06-23
This week's release introduces new managed protection to address a critical pre-authentication OS command injection vulnerability in Ivanti Sentry (CVE-2026-10520). Key Findings CVE-2026-10520: An OS command injection vulnerability in Ivanti Sentry allows remote, unauthenticated attackers to execute arbitrary system commands with root privileges.
Also shipped Jun 23, 2026Cloudflare in June 2026 →
Introducing the Unified Image API
The new Unified Image API provides capability discovery across over 30 image models from 8 providers through a single endpoint.
What is a Scout? A technical deep dive
PostHog has introduced scouts, which are autonomous agents that monitor product data for patterns and draft fixes. This feature is now available in open beta.
Mapping one variable to multiple values generally available
Earlier this year, we introduced multi-property variables in public preview for Grafana OSS and Enterprise (and generally available in Grafana Cloud). Now, this feature is generally available in Grafana OSS and Enterprise. Multi-property variables are a simple, powerful way to let you map several identifiers to a single variable using a JSON array.
Xcode 27.0 Beta 2 Available
The Xcode 27.0 Beta 2 image is now available to be used in CircleCI pipelines. The full manifest of installed software can be found here .
`DraftOrderDiscountNotAppliedWarning.priceRule` removed in GraphQL Admin API 2026-10
Starting with GraphQL Admin API version 2026-10 , the deprecated priceRule field on the DraftOrderDiscountNotAppliedWarning object is removed. This is a breaking change for apps that query priceRule on DraftOrderDiscountNotAppliedWarning , which is returned in draft order discount warnings from mutations such as draftOrderCalculate , draftOrderCreate , and...
Custom Agents
Global Agent is great for ad hoc questions, but what about the ones you ask every week? Custom Agents lets you create purpose-built AI agents tailored to your specific workflows, data, and questions , then let them run autonomously on a schedule, so the work happens without you having to ask. Configure each agent with its own instructions, scope, and tools.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Workflows rollback handlers now include step context
Workflows makes it easier to build reliable multi-step applications that can recover when downstream systems fail. Rollback handlers now receive the original step context via a ctx object for the step being rolled back. This includes ctx.step.name , ctx.step.count , ctx.attempt , and the step config with defaults applied.
Data Localization Suite - Regionalized IP Bindings for Regional Services
Regional Services now supports Regionalized IP Bindings , letting you regionalize traffic at the IP layer for prefixes you bring to Cloudflare through Bring Your Own IP (BYOIP) .
Speed - Cloudflare AMP/SXG is now end of life
Cloudflare Accelerated Mobile Pages (AMP) and Signed Exchanges (SXG) support has reached end of life. The features have been disabled since October 2025, so customers who had them configured should see no change to their traffic. Customers will no longer be able to configure AMP/SXG through API or rulesets. The Zone API will start throwing errors.
Cloudflare One Client for macOS (version 2026.6.782.1)
A new Beta release for the macOS Cloudflare One Client is now available on the beta releases downloads page . This beta release introduces upgraded security of device registration to be hardware-backed. Registration tokens can now be generated in the Secure Enclave whenever available to provide stronger protection against device impersonation.
AI Search - Control AI Search similarity cache freshness
AI Search now gives you more control over similarity cache freshness. Similarity cache helps reduce latency and inference cost by reusing responses for semantically similar queries. With these updates, you can choose how long responses are eligible for reuse and clear cached responses when they may be stale.
Audit Logs v2 , Organization-level audit logs in Cloudflare dashboard
You can now, as an Organization Super Administrator, view organization-level audit logs in the Cloudflare dashboard, in addition to the existing API access . Organization audit logs help you monitor activity across your organization.
Logs - New WebSocket Analytics Logpush dataset and updated fields
Cloudflare has updated Logpush datasets : New datasets WebSocket Analytics : A new dataset with fields including BytesReceivedClient , BytesReceivedOrigin , BytesSentClient , BytesSentOrigin , ClientASN , ClientIP , ClientRequestHost , ClientRequestPath , ClientRequestUserAgent , ColoCode , ConnectionCloseReason , ConnectionCloseSource , ConnectionID ...
Radar - Precise IP location and richer AS details on the Cloudflare Radar IP page
Radar now plots your IPv4 and IPv6 locations on the IP page ↗ , shows the Cloudflare data centers serving your connection, and includes more detail about the autonomous system (AS) your primary IP belongs to. Your IP location on the map The map of your connection now shows: IP location markers , The primary IP will show as a red marker.