Releasesby IbisWAF - WAF Release - 2026-10-25 - Emergency - Cloudflare Managed Ruleset
UpdatetodayUnverifiedAdded Oct 25, 2026
Cloudflare released an emergency update to its Managed Ruleset, adding two rules to log requests related to the Brotli vulnerability CVE-2026-111497.
Topics: Security
More Cloudflare developer platform releases
Every Cloudflare developer platform releaseFlagship - Target Flagship feature flags with structured evaluation context
Flagship now supports nested objects and arrays in evaluation context, allowing developers to target feature flags based on complex user profiles and tags.
D1 - D1 database undelete requests limited to the last 7 days
Cloudflare D1 now restricts database undelete requests to databases deleted within the last 7 days.
Radar - Redesigned Cloudflare Radar homepage
Cloudflare redesigned the Radar homepage to improve data exploration for broader audiences.
Workers - Pin your npm version in Workers Builds with packageManager
Workers Builds now supports pinning the npm version via the packageManager field in package.json to ensure consistent dependency installation.
Cloudflare One Client for Windows (version 2026.9.1555.1)
The Windows Cloudflare One Client beta adds automatic endpoint selection for Global Acceleration, protection against unauthorized uninstallation, and network MTU monitoring.
Cloudflare One Client for macOS (version 2026.9.1555.1)
The macOS Cloudflare One Client beta now requires macOS 15.0 and includes automatic endpoint selection for Global Acceleration and improved MTU monitoring.
Agents - Cloudflare MCP servers no longer serve /sse
Cloudflare product-specific MCP servers now exclusively use the /mcp endpoint. Requests to /sse will return a 410 Gone status.
Agents SDK now supports the latest Pi 1.4 release
Agents SDK v0.30.0 adds support for Pi 1.4, including improved task recovery, hibernation for sleeping tasks, and better handling of model stream retries.