WAF - WAF Release - 2026-07-17 - Emergency
UpdateUnverifiedAdded Sep 24, 2026
This emergency release adds a new managed rule to block active exploitation of a critical remote code execution (RCE) and SQL injection (SQLi) vulnerability found in popular web frameworks.
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Jul 17 | Cloudflare One Appliance, Cloudflare One, Cloudflare WAN - Restart, reboot, or shut down a Cloudflare One Appliance from the dashboardunverified Deprecation | Deprecation |
| Jul 17 | Email Service - Preview sent emails in the Activity logunverified Preview | Preview |
| Jul 17 | Gateway - New header control options for Gateway HTTP policiesunverified Update | Update |
| Jul 17 | Cloudflare Fundamentals, Organizations - Distributor, MSSP, and Agency partners can manage Organization members directlyunverified Beta | Beta |
| Jul 16 | Access, Cloudflare One - Bulk print PDFs for browser-based RDPunverified Update | Update |
| Jul 16 | Flagship - Manage Flagship from the command line with Wranglerunverified Update | Update |
| Jul 16 | Rules - Bot management fields and ASN support in Cache Rulesunverified Update | Update |
| Jul 15 | Gateway, DNS - Internal DNS is now generally availableunverified GA | GA |
Also shipped on Jul 17, 2026
Cloudflare in July 2026
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.