WAF - WAF Release - 2026-09-15
BetaUnverifiedAdded Sep 24, 2026
This release introduces new threat detections to enhance protection against command injection attempts, Server-Side Request Forgery (SSRF) targeting cloud metadata, and information disclosure within version control history.
Topics: Observability, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Sep 15 | Workflows, Workers - Stream Workflow instance events in your Worker or via the API with .subscribe()unverified Update | Update |
| Sep 15 | Cloudflare One, Access - Access for Infrastructure now supports tagged targets and tag-based target criteriaunverified Update | Update |
| Sep 15 | Workers - Grant teammates and agents access to specific Workersunverified Update | Update |
| Sep 16 | Workers, Hyperdrive - Hyperdrive support for Python Workersunverified Update | Update |
| Sep 16 | R2, R2 Data Catalog - R2 Data Catalog adds table maintenance visibility and manual queueingunverified Update | Update |
| Sep 14 | Access - Require fresh authentication for SAML identity providersunverified Update | Update |
| Sep 14 | AI Gateway - Prevent Unified Billing fallback for BYOK third-party providersunverified Pricing | Pricing |
| Sep 14 | Browser Run - Control which hostnames Browser Run sessions can accessunverified Update | Update |
Also shipped on Sep 15, 2026
Cloudflare in September 2026
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.