WAF - WAF Release - 2026-08-26 - Emergency
UpdateUnverifiedAdded Sep 24, 2026
This emergency release updates an existing Next.js remote code execution rule to identify CVE-2026-75604 and adds a new rule for remote code execution in the Next.js Image Optimizer via crafted AVIF images.
Topics: Security
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Aug 26 | Access - Access service token secrets use a scannable formatunverified Update | Update |
| Aug 26 | AI Search - New Workers AI text generation models in AI Searchunverified Update | Update |
| Aug 26 | Flagship - Create app-scoped API tokens for Flagshipunverified Update | Update |
| Aug 26 | Log Explorer - Delete Log Explorer datasetsunverified Update | Update |
| Aug 26 | Logpush Connectors, Logs - Azure Functions-based Microsoft Sentinel connector deprecationunverified Deprecation | Deprecation |
| Aug 26 | Radar - Radar Researcher adds richer sources and URL Scanner explanationsunverified Beta | Beta |
| Aug 26 | Workers AI - Z.ai GLM-5.3 Flash now available on Workers AIunverified Update | Update |
| Aug 27 | Automatic Platform Optimization - APO caches more crawler and bot traffic againunverified Update | Update |
Also shipped on Aug 26, 2026
Cloudflare in August 2026
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.