WAF - WAF Release - 2026-07-01
UpdateUnverifiedAdded Sep 24, 2026
This release adds targeted coverage for a path traversal flaw in Fortinet FortiSandbox (CVE-2026-39813) and transitions the Anomaly:Header:User-Agent - Fake Bing or MSN Bot rule action from Block to Disabled.
Topics: AI agents, Security, Observability
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Jul 1 | Cloudflare One Client - Cloudflare One Client for Linux (version 2026.6.836.0)unverified GA | GA |
| Jul 1 | Access - Fix redirect URL fragment encoding for single-page applicationsunverified Update | Update |
| Jul 1 | Access - Independent MFA for infrastructure applicationsunverified Update | Update |
| Jul 1 | Bots - New options to manage AI trafficunverified Update | Update |
| Jul 1 | Bots - More visibility into bot traffic with BotBase and Business Insightsunverified Update | Update |
| Jul 1 | Containers - Use Google Artifact Registry images with Containersunverified Update | Update |
| Jul 1 | Cloudflare Images - Images binding is now billed per unique transformationunverified Update | Update |
| Jul 1 | Vectorize - Reduced end-to-end latency for vector changesunverified Update | Update |
Also shipped on Jul 1, 2026
Cloudflare in July 2026
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.