Releasesby IbisWAF - WAF Release - 2026-10-14 - Emergency
UpdateyesterdayUnverifiedAdded Oct 15, 2026
This emergency release adds a new managed rule to block active exploitation of a critical remote code execution (RCE) vulnerability found in popular web frameworks.
Topics: Security
More Cloudflare developer platform releases
Every Cloudflare developer platform releaseCloudflare One, Access - Infrastructure applications support a configurable session duration
Infrastructure applications now have a configurable session duration with a default value of 24 hours. You can set the session duration when creating or editing an infrastructure application in the dashboard or via the API.
DNS - Configure Advanced Custom Nameservers with nameserver sets (beta)
Nameserver sets are now available in beta to Enterprise accounts. A nameserver set groups two to five custom nameserver names with Cloudflare-assigned IP addresses. You can assign the set to zones in the same account. Enterprise customers using Cloudflare DNS can create Advanced Custom Nameserver sets.
Rules - Remove surrounding bytes with trim functions
Cloudflare Rules supports three new functions for removing surrounding bytes. Use them to remove whitespace before comparing request values. All HTTP products support these functions on all plans: trim() removes bytes from both ends. trim_start() removes bytes from the start. trim_end() removes bytes from the end.
Agents, Workers - Cloudflare API MCP server sends Workers Issues as MCP Events
Workers Issues provides built-in error monitoring for Cloudflare Workers. It detects production failures and groups related failures into issues without an SDK or application wrapper. The Cloudflare API MCP server now sends these issues as MCP Events ↗︎ , the first event it exposes.
Agents - New persistent browser tool in the Agents SDK, with tabs and logins that last between turns
The Cloudflare Agents SDK now provides a browserTool that gives your agent a Browser Run browser it can return to on later turns. Your agent can open a website, inspect a page, and come back to it with its tabs, cookies, and login session intact while the browser session remains alive.
Gateway, Cloudflare One - Request Gateway DNS64 through DNS locations and EDNS
You can now request DNS64 through Cloudflare Gateway DNS location settings or Extension Mechanisms for DNS (EDNS) options. DNS64 synthesizes AAAA records from A records for IPv6-only networks. These networks require network address translation from IPv6 to IPv4 (NAT64).
Cloudflare Web Analytics - Deeper Core Web Vitals Diagnostics: LCP & INP Sub-Part Metrics in Real User Monitoring
The Core Web Vitals tell you whether a page is slow but beyond perceived load time, layout instability, or responsiveness they do not guide you to the problematic area directly. To help you with this, Real User Monitoring (RUM) in Web Analytics now breaks Largest Contentful Paint (LCP) and Interaction to Next Paint (INP) into their respective sub-parts.
Workers, BYOIP, Bots - Workers subrequests now preserve context for BYOIP destinations
Cloudflare now preserves Workers context when a subrequest targets a Cloudflare-proxied hostname using Bring Your Own IP (BYOIP) . These requests are identified as Cloudflare-to-Cloudflare traffic instead of external Internet traffic. Previously, some BYOIP subrequests could lose Workers context and original client signals.
Also shipped on Oct 14, 2026
Cloudflare in October 2026Workspace-level package repositories for Databricks Apps are generally available
Workspace admins can now configure default Python and npm package repositories for Databricks Apps. Apps inherit the workspace configuration while still allowing app-level overrides. See Configure default package repositories .
The Apache Hive catalog endpoint in the Lakehouse runtime catalog is now generally available (GA)
The Apache Hive catalog endpoint in the Lakehouse runtime catalog is now generally available (GA). This integration lets you use the metastore as a serverless, central metadata layer, enabling seamless data sharing and unified querying across Apache Spark, Apache Hive, and BigQuery.
Metadata migration from Dataproc Metastore to Lakehouse is now generally available (GA)
Metadata migration from Dataproc Metastore to Lakehouse is now generally available (GA). You can perform a one-time backfill migration or dry run to migrate metadata from a Dataproc Metastore service to an Apache Iceberg REST catalog endpoint or a Hive catalog endpoint using the Google Cloud console, the gcloud CLI, or the REST API.
Conversational analytics now lets you create a conversation with all of the data sources in multiple...
Conversational analytics now lets you create a conversation with all of the data sources in multiple projects, or create a conversation with a dataset . These features are generally available (GA).
You can publish a BigQuery Conversational Analytics agent in Gemini Enterprise
You can publish a BigQuery Conversational Analytics agent in Gemini Enterprise . This feature is now generally available (GA).
The AI.AGG function now supports the output_schema argument, which lets you specify the schema of the...
The AI.AGG function now supports the output_schema argument, which lets you specify the schema of the function output as a comma-separated list of fields. This feature is generally available (GA).