Skip to content

WAF - WAF Release - 2026-09-30

Beta3 days agoUnverifiedAdded Oct 2, 2026

This release introduces new detections to enhance protection against a specific GitLab path traversal vulnerability, alongside advanced generic rules targeting HTTP request smuggling, directory traversal, and command injection attempts. Key Findings CVE-2026-85706: A path traversal vulnerability affecting GitLab.

Topics: Security, Observability, Developer tools

Cloudflare's release notes

More Cloudflare developer platform releases

Every Cloudflare developer platform release

Also shipped on Sep 30, 2026

Cloudflare in September 2026

New releases by email

Tuesday mornings: the week's data, AI and developer-tools releases, only in weeks when something shipped.

Double opt-in. Unsubscribe any time.