Releasesby GlyphWAF - WAF Release - 2026-08-07
This release updates WordPress XSS rule metadata in the Cloudflare Managed Ruleset and Cloudflare Free Ruleset to identify XSS2Shell (CVE-2026-64638). It also disables the Command Injection - Obfuscation rule. Key Findings CVE-2026-64638: A pre-authentication reflected cross-site scripting vulnerability affecting the WordPress login screen.
Also shipped Aug 7, 2026Cloudflare in August 2026 →
DCM Projects (General availability)
DCM Projects are now generally available and are no longer in Preview . DCM Projects enable a declarative approach to managing Snowflake objects as code. You define the desired target state of your databases, tables, tasks, and other Snowflake objects in definition files, and Snowflake determines and applies the necessary changes to reach that state.
Snowflake Native Apps: Cortex Agents and MCP servers (General availability)
Cortex Agents and MCP servers in Snowflake Native Apps are now generally available. Providers can create the following objects in an app’s setup script: Apps can also use inter-app communication so that one app’s agent calls another app’s agent or MCP server.
Tag automations (Beta)
Tag automations are now in Beta . A tag automation assigns or removes governed tags on the Unity Catalog tables or volumes that match conditions you define, so tags stay accurate as your data and metadata change.
Change data feed on materialized views (Beta)
You can now read a change data feed from a materialized view created in a Lakeflow pipeline or in Databricks SQL, using Databricks Runtime 18 LTS or above. Use this to replicate materialized view changes to destinations outside Databricks, or to keep a history of materialized view changes for auditing and reporting.
ai_search function (Beta)
The ai_search() SQL function retrieves information from one or more AI Search indexes configured as knowledge sources. Given a natural-language query, the function generates optimized search queries, retrieves and deduplicates results across sources, reranks them by relevance, and returns the most relevant documents.
AlloyDB can sync BigQuery tables in preview
BigQuery tables can be synced into AlloyDB once or on a periodic schedule, giving operational analytics low-latency transactional access to data lake data.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
AI Gateway, Workers AI - Workers AI and AI Gateway unify model access and billing
Workers AI and AI Gateway now provide a unified path for accessing models and managing inference traffic. Use the same AI binding and REST API to call models hosted on Workers AI or by supported third-party providers, with AI Gateway providing observability, logging, caching, security, and billing controls.
Hyperdrive - MySQL support in Hyperdrive is now generally available
Support for MySQL in Hyperdrive is now generally available. You can connect to any MySQL database from your Workers using Hyperdrive. Hyperdrive makes your regional, MySQL databases fast when connecting from Cloudflare Workers.
Hyperdrive - Restart a Hyperdrive configuration from the dashboard
You can now restart a Hyperdrive configuration from the Cloudflare dashboard. Restarting drains the connection pool and forces Hyperdrive to establish new connections to your origin database. Restarting is a break-glass action. Hyperdrive automatically detects and recovers from most database failovers.
Load Balancing health notifications now resolve automatically
Load Balancing health notifications are now stateful. When a pool or endpoint becomes unhealthy, the notification opens an incident in your alerting tool as before. When that same pool or endpoint recovers, the follow-up notification is matched to the original alert and resolves that incident automatically, so you no longer have to close it by hand.
Cloudflare Mesh, Cloudflare One - Container image for Cloudflare Mesh
Cloudflare Mesh nodes can now run as Docker containers. The cloudflare/mesh ↗ image is available on Docker Hub for Docker Compose, Kubernetes, and any OCI-compatible runtime , no host-level package installation required.
Radar - AS-level connectivity and upstream providers on Cloudflare Radar
Radar expands its Routing section ↗ with two widgets on AS pages, such as AS13335 ↗ , that describe how a network reaches the rest of the Internet: the paths it takes toward the Tier-1 ↗ networks, and the mix of direct upstreams carrying its routes. Both are derived from RouteViews ↗ RIB snapshots, unioned across selected collectors.
Radar Researcher beta and WebMCP support now available
Cloudflare Radar now includes Radar Researcher ↗ , a beta AI-powered assistant for exploring Internet trends and traffic data in plain language. Open Researcher from the header on any Radar page to ask questions by voice or text, receive explanations, and view interactive charts based on Radar API data.
Sandbox SDK 1.0 preview on @next
Sandbox SDK 1.0 is available to preview under the npm @next tag. For existing applications, the current stable package remains published on the 0.12.x line. Sandbox SDK first shipped to provide a rich library for running untrusted and agent-driven work on Cloudflare Containers . Since then, both Sandbox and Containers have matured.