WAF - WAF Release - 2026-07-29
UpdateUnverifiedAdded Sep 24, 2026
This release introduces new rules and updates existing threat signatures to provide targeted protections for vulnerabilities in Nuxt Server Island components and Alibaba Fastjson deserialization routines, alongside enhanced protections for cloud metadata Server-Side Request Forgery (SSRF) and obfuscated command injection attempts.
Topics: Security, Observability, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Jul 30 | Access - Admins can turn on Code Mode by default for MCP portal usersunverified Update | Update |
| Jul 30 | AI Search - Use AI Search with the Agents SDK, AI SDK, and LangChainunverified Update | Update |
| Jul 30 | Workers - Node.js 24 is now the default for Workers Buildsunverified Update | Update |
| Jul 28 | 1.1.1.1 - Improved DoH JSON formatting for additional record typesunverified Update | Update |
| Jul 28 | Agents, Workers - Cloudflare MCP servers support the new MCP 2026-07-28 Specificationunverified Update | Update |
| Jul 28 | Browser Run - Browser Run adds structured handoff for Human in the Loopunverified Update | Update |
| Jul 28 | Cloudflare One, Gateway - Control Cloudflare Gateway DNS caching with a maximum TTL settingunverified Update | Update |
| Jul 28 | Workers AI - Select models now require the Workers Paid planunverified Update | Update |
Also shipped on Jul 29, 2026
Cloudflare in July 2026
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.