WAF - WAF Release - 2026-09-25 - Emergency

UpdateSep 25, 20262 days agoUnverifiedAdded Sep 26, 2026

This update provides immediate defense against critical vulnerabilities affecting WordPress and JFrog Artifactory, including path traversal, local file inclusion (LFI), cross-site scripting (XSS), and authentication bypass exploits. Key Findings CVE-2026-87902: A high-severity Path Traversal and Local File Inclusion (LFI) vulnerability affecting WordPress.

Topics: Security

Cloudflare's release notes

More Cloudflare developer platform releases

Every Cloudflare developer platform release

Date	Release	Type
Sep 252 days ago	Browser Run, Queues - Subscribe to Browser Run crawl events unverified Update	Update
Sep 252 days ago	Cloudflare Network Firewall, Magic Transit, Cloudflare WAN - Managed Rulesets supported in Unified Routing unverified Update	Update
Sep 252 days ago	Email Service - Suppress recipients for one sending domain unverified Update	Update
Sep 252 days ago	Workers tracing , new getActiveSpan(), recordException(), startSpan(), and setAttributes() APIs unverified Update	Update
Sep 252 days ago	Workers - See every release and gradual deployment on Workers Metrics charts unverified Update	Update
Sep 243 days ago	1.1.1.1 - RFC 8509 root key trust anchor sentinel support unverified Update	Update
Sep 243 days ago	R2 - R2 bandwidth usage metrics unverified Update	Update
Sep 243 days ago	Access, Cloudflare One - MCP server portals are now generally available unverified GA	GA

Also shipped on Sep 25, 2026

Cloudflare in September 2026

Date	Company	Release	Product	Type
Sep 252 days ago	Databricks	Tags for dashboards, notebooks, Databricks apps, and Genie Agents are now generally available unverified DatabricksDatabricks AppsGA	Databricks Apps	GA
Sep 252 days ago	GitHub	Default Enablement of Copilot Features for Copilot Business and Enterprise unverified GitHubGitHub CopilotGA	GitHub Copilot	GA
Sep 252 days ago	Gradium	2026.09.15 unverified GradiumPreview	Gradium	Preview
Sep 252 days ago	CodeRabbit	CLI v0.8.1 \| CLI unverified CodeRabbitPreview	CodeRabbit	Preview
Sep 252 days ago	Railway	Free VMs without an account, tracing, OpenCode on Cloud Agents unverified RailwayPreview	Railway	Preview
Sep 252 days ago	Microsoft	[In preview] Public Preview: Azure HorizonDB supports PostgreSQL 18 unverified MicrosoftAzure databases and analyticsPreview	Azure databases and analytics	Preview

More Cloudflare developer platform releases

Also shipped on Sep 25, 2026

New releases by email