Cloudflare
Everything ChangeIntel collected about Cloudflare from 3 sources, on one timeline.
Ongoing public incidents for Cloudflare: CloudflareChanges to Cloudflare Workers are not producing Event Subscription events; CloudflareSpectrum Availability issues; CloudflareIncreased error rates and reduced success rates for Workflows operations Service status
Nothing about Cloudflare needs action right now
- 138 changes in the last 30 days
Cloudflare timeline
8 weeks back, 6 ahead · marks show importance · counts use first-seen records- Release or post
- Known issue
- Out-of-band, exploited, or incident
- Revised by its source
- Deadline
SecurityMSRC · CISA KEV · security news
- Tue 15 Sep · Security advisory: WAF - WAF Release - 2026-09-15
- Tue 22 Sep · Security advisory: WAF - WAF Release - 2026-09-22
- Fri 25 Sep · Security advisory: WAF - WAF Release - 2026-09-25 - Emergency (Release notes name CVE-2026-87902, CVE-2026-42018, CVE-2026-82329)
- Wed 30 Sep · Security advisory: WAF - WAF Release - 2026-09-30 (Release notes name CVE-2026-85706)
- Thu 1 Oct · Security advisory: WAF - WAF Release - 2026-10-01 - Emergency (Release notes name CVE-2026-88771)
- Tue 6 Oct · Security advisory: WAF - WAF Release - 2026-10-06 (Release notes name CVE-2026-94127)
- Wed 7 Oct · Security advisory: WAF - Updated unsafe topic detection for AI Security for Apps
- Fri 9 Oct · Security advisory: WAF, Rules - Failed detections field available in Rules
- Mon 12 Oct · Security advisory: WAF - WAF Release - 2026-10-12 (Release notes name CVE-2026-102989, CVE-2026-21589)
- Wed 14 Oct · Security advisory: WAF - WAF Release - 2026-10-14 - Emergency
- Wed 21 Oct · Security advisory: WAF - WAF Release - 2026-10-21 - Emergency - Cloudflare Managed Ruleset and 2 more
- Thu 22 Oct · Security advisory: WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Managed Ruleset and 1 more (Release notes name CVE-2026-109618, CVE-2026-109619)
- Fri 23 Oct · Security advisory: WAF - WAF Release - 2026-10-23 - Emergency - Cloudflare Managed Ruleset and 1 more (Release notes name CVE-2026-115560, CVE-2026-109618, CVE-2026-109619)
- Sun 25 Oct · Security advisory: WAF - WAF Release - 2026-10-25 - Emergency - Cloudflare Managed Ruleset (Release notes name CVE-2026-111497)
- Wed 28 Oct · Security advisory: WAF - WAF Release - 2026-10-28 and 1 more (Release notes name CVE-2026-109618, CVE-2026-109619, CVE-2026-115560)
- Fri 30 Oct · Security advisory: WAF - WAF Release - 2026-10-30 and 1 more (Release notes name CVE-2026-109618, CVE-2026-109619, CVE-2026-115560)
- Tue 3 Nov · Security advisory: WAF - WAF Release - 2026-11-03 and 1 more (Release notes name CVE-2026-109618, CVE-2026-109619, CVE-2026-115560)
- Tue 3 Nov · Revised by Cloudflare WAF changelog: WAF - WAF Release - 2026-10-30 and 1 more (Changed after ChangeIntel first saw it)
- Thu 12 Nov · Security advisory: WAF - Manage AI Security for Apps with Terraform
2 changesRoutine only
Issues & breaking changesKnown issues · breaking changes · incidents
- Thu 15 Oct · Service incident: Cloudflare: Network Performance Issues in Eastern North America and 6 more (The provider called it an outage)
- Fri 16 Oct · Service incident: Cloudflare: Cloudflare Fedramp Dashboard and Access and 6 more (The provider called it an outage)
- Sun 18 Oct · Service incident: Cloudflare: Network Performance Issues in Virginia and Ohio United States
- Mon 19 Oct · Service incident: Cloudflare: Cloudflare Secure Web Gateway and DLP enforcement issues for Google Gemini and 1 more
- Tue 20 Oct · Service incident: Cloudflare: Cloudflare Zero Trust connectivity and 1 more (The provider called it an outage)
- Wed 21 Oct · Service incident: Cloudflare: Elevated Errors for R2 and Durable Objects in ENAM and 2 more (The provider called it an outage)
- Thu 22 Oct · Service incident: Cloudflare: Network Error Log Processing Unavailable and 5 more (The provider called it an outage)
- Fri 23 Oct · Service incident: Cloudflare: Network connectivity issues affecting services in North America and 3 more (The provider called it an outage)
- Sat 24 Oct · Service incident: Cloudflare: Network Performance Issues in Ashburn and 1 more
- Mon 26 Oct · Service incident: Cloudflare: Delayed, missed, and duplicated Workers Cron Triggers and 3 more
- Tue 27 Oct · Service incident: Cloudflare: ERR_TIMED_OUT and ERR_EMPTY_RESPONSE being observed by Cloudflare Customers and 7 more (The provider called it an outage)
- Wed 28 Oct · Service incident: Cloudflare: Increased latency and error rate for R2 in ENAM and 4 more
- Thu 29 Oct · Ongoing incident: Cloudflare: Increased error rates and reduced success rates for Workflows operations and 7 more (The provider lists it as ongoing)
- Fri 30 Oct · Service incident: Cloudflare: Increased Errors for Browser Run
- Sat 31 Oct · Service incident: Cloudflare: Cache purge delays in Qingdao Shandong, China
- Mon 2 Nov · Service incident: Cloudflare: Cloudflare Gateway DNS-over-TLS Connectivity Issues over IPv4 and 1 more
- Tue 3 Nov · Service incident: Cloudflare: Elevated number of 5xx errors in HKG and 5 more
- Wed 4 Nov · Service incident: Cloudflare: Increased Errors for Durable Objects and Downstream Services in Eastern North America (ENAM) and 1 more
- Thu 5 Nov · Service incident: Cloudflare: Network disruption across multiple colocations in India and 2 more
- Fri 6 Nov · Service incident: Cloudflare: Network Performance Issues in Singapore and 2 more
- Sat 7 Nov · Service incident: Cloudflare: Spectrum Availability Issue in Phoenix and 1 more
- Mon 9 Nov · Ongoing incident: Cloudflare: Spectrum Availability issues and 2 more (The provider lists it as ongoing)
- Tue 10 Nov · Ongoing incident: Cloudflare: Changes to Cloudflare Workers are not producing Event Subscription events and 3 more (The provider lists it as ongoing)
- Wed 11 Nov · Service incident: Cloudflare: SSL Certificate Provisioning Issue and 5 more
- Thu 12 Nov · Service incident: Cloudflare: Replicate Issue and 2 more
- Fri 13 Nov · Service incident: Cloudflare: Cloudflare is seeing an issue with Workers API availability and 3 more
- Sat 14 Nov · Service incident: Cloudflare: Increased errors for R2 and Tiered Cache
93 changes10 worth a look
News & announcementsBlogs · what's new pages
- Mon 12 Oct · Product news: Filter, reshape, and redact logs before export with Transformers
- Tue 13 Oct · Product news: Under the hood, off the hot path: How D1 scales to millions of databases and 1 more
- Wed 14 Oct · Product news: Yandex outage: Data shows that instead of going dark, malicious bots went on the move and 1 more
- Thu 15 Oct · Product news: Deploy with Void and 2 more
- Fri 16 Oct · Product news: Continuous accountability for Verified bots
- Mon 19 Oct · Product news: Cutting our inference bill by 68% by being obsessive about optimization and 2 more
- Tue 20 Oct · Product news: 8 eMudhra certificates are compromised. Here's what you need to know and 1 more
- Wed 21 Oct · Product news: Introducing full transaction detection for Cloudflare WAF and 2 more
- Thu 22 Oct · Product news: Localizing compliance at scale: Achieving South Korea’s ISMS certification
- Fri 23 Oct · Product news: Origin Range Requests: Serving large files without range-request tuning and 1 more
- Mon 26 Oct · Product news: Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
- Tue 27 Oct · Product news: What took the Internet offline in Q3 2026 and 1 more
- Thu 29 Oct · Product news: Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants
- Fri 30 Oct · Product news: 4 real? Tracking exploitation and patching of eMudhra’s weak keys and 1 more
- Mon 2 Nov · Product news: How we halved DNS build delay and cut memory use by 85%
- Tue 3 Nov · Product news: Introducing Zero Wire, a hub for investigating critical Internet vulnerabilities
- Wed 4 Nov · Product news: See the agents, set the terms: New visibility and control for personal agents
- Thu 5 Nov · Product news: Agents aren’t humans (but they kinda are)
- Fri 6 Nov · Product news: The post-quantum future of web privacy
- Mon 9 Nov · Product news: Launching the Vite Ecosystem Fund
- Wed 11 Nov · Product news: Choosing QuePaxa, an unusual consensus algorithm
- Fri 13 Nov · Product news: Introducing Spend Management: Spending limits and alerts for Cloudflare and 2 more
28 changesRoutine only
Threads
Related changes across sources- Wednesday, October 21, 2026 Security Releases Security advisory: WAF - WAF Release - 2026-10-25 - Emergency - Cloudflare Managed Ruleset1 about Cloudflare, in a thread of 9 changes Follow evidence and connection reasons
- Cloudflare: Changes to Cloudflare Workers are not producing Event Subscription events Ongoing incident4 changes about Cloudflare Follow evidence and connection reasons
- Cloudflare: Spectrum Availability issues Ongoing incident3 changes about Cloudflare Follow evidence and connection reasons
- WAF - WAF Release - 2026-07-01 Security advisory1 about Cloudflare, in a thread of 2 changes Follow evidence and connection reasons
Revised by the vendor
2Content revised
| Item | Noticed |
|---|---|
| WAF - WAF Release - 2026-10-30 Cloudflare WAF changelog | 3 Nov |
| WAF - WAF Release - Scheduled changes for 2026-11-10 Cloudflare WAF changelog | 3 Nov |
ChangeIntel compares its own snapshots, so the date is when it noticed the change; the vendor may have made it earlier.
Cloudflare changelog
RSSNovember 2026
- Issues and security Service incident · Cloudflare: Increased errors for R2 and Tiered Cache
- Issues and security Service incident · Cloudflare: Cloudflare is seeing an issue with Workers API availability
- Issues and security Service incident · Cloudflare: Cloudflare is currently having an issue with the r8.im registry used for Replicate model publishing and builds is currently restricted
- Issues and security Service incident · Cloudflare: Issues with 1.1.1.1 public resolver in Canada
- Issues and security Service incident · Cloudflare: Elevated error rate for workers startup
- New and changed features Product news · Introducing Spend Management: Spending limits and alerts for Cloudflare
- New and changed features Product news · Adapting to AI penetration testing orchestrators: The Modern Security Model
- New and changed features Product news · Kitesurf is now open source
- Issues and security Service incident · Cloudflare: Replicate Issue
- Issues and security Service incident · Cloudflare: DNSSEC Configuration Change Issues
- Issues and security Service incident · Cloudflare: Durable Objects increased error rates in North America
- Issues and security Security advisory · WAF - Manage AI Security for Apps with Terraform
- Issues and security Service incident · Cloudflare: SSL Certificate Provisioning Issue
- Issues and security Service incident · Cloudflare: Workers deployments errors with D1 bindings
- Issues and security Service incident · Cloudflare: Elevated number of 5xx errors in Hong Kong
- Issues and security Service incident · Cloudflare: Network Performance Degraded
- Issues and security Service incident · Cloudflare: Cloudflare Worker Builds Issue
- Issues and security Service incident · Cloudflare: Replicate Model Registry Unavailable
- New and changed features Product news · Choosing QuePaxa, an unusual consensus algorithm
- Issues and security Ongoing incident · Cloudflare: Changes to Cloudflare Workers are not producing Event Subscription events
- Issues and security Service incident · Cloudflare: Network Performance Issues in St. Louis, USA
- Issues and security Service incident · Cloudflare: Prediction issue on OpenAI models via Replicate
- Issues and security Service incident · Cloudflare: Account Analytics Filter Issue
- Issues and security Ongoing incident · Cloudflare: Spectrum Availability issues
- Issues and security Service incident · Cloudflare: Changes made to Workers may be delayed or disrupted
- Issues and security Service incident · Cloudflare: Network Performance Issues in Eastern North America
- New and changed features Product news · Launching the Vite Ecosystem Fund
- Issues and security Service incident · Cloudflare: Spectrum Availability Issue in Phoenix
- Issues and security Service incident · Cloudflare: Network Performance Issues in Chicago
- Issues and security Service incident · Cloudflare: Network Performance Issues in Singapore
- Issues and security Service incident · Cloudflare: Fedramp Customers have Delayed Purges
- Issues and security Service incident · Cloudflare: Wrangler Deployments, Pages, and Workers Builds failures
- New and changed features Product news · The post-quantum future of web privacy
- Issues and security Service incident · Cloudflare: Network disruption across multiple colocations in India
- Issues and security Service incident · Cloudflare: Increased Errors for Durable Objects in Western Europe
- Issues and security Service incident · Cloudflare: Workers Builds Issues
- New and changed features Product news · Agents aren’t humans (but they kinda are)
- Issues and security Service incident · Cloudflare: Increased Errors for Durable Objects and Downstream Services in Eastern North America (ENAM)
- Issues and security Service incident · Cloudflare: Network latency issues in NRT
- New and changed features Product news · See the agents, set the terms: New visibility and control for personal agents
- Issues and security Security advisory · WAF - WAF Release - 2026-11-03
- Issues and security Service incident · Cloudflare: Elevated number of 5xx errors in HKG
- Issues and security Service incident · Cloudflare: Increased Durable Object Errors in the Dallas, TX US region
- Issues and security Service incident · Cloudflare: Increased Latency and Errors for R2 and Downstream Services in Western North America (WNAM)
- Issues and security Service incident · Cloudflare: Network Performance Issues in APJC
- Issues and security Service incident · Cloudflare: Cloudflare Container Issues
- Issues and security Service incident · Cloudflare: Cloudflare Workers and Pages build errors
- Issues and security Product news · Introducing Zero Wire, a hub for investigating critical Internet vulnerabilities
- Issues and security Revised by Cloudflare WAF changelog · WAF - WAF Release - 2026-10-30
- Issues and security Revised by Cloudflare WAF changelog · WAF - WAF Release - Scheduled changes for 2026-11-10
- Issues and security Security advisory · WAF - WAF Release - Scheduled changes for 2026-11-10
- Issues and security Service incident · Cloudflare: Cloudflare Gateway DNS-over-TLS Connectivity Issues over IPv4
- Issues and security Service incident · Cloudflare: Worker Deployments Delayed
- New and changed features Product news · How we halved DNS build delay and cut memory use by 85%
October 2026
- Issues and security Service incident · Cloudflare: Cache purge delays in Qingdao Shandong, China
- Issues and security Security advisory · WAF - WAF Release - 2026-10-30
- Issues and security Service incident · Cloudflare: Increased Errors for Browser Run
- New and changed features Product news · 4 real? Tracking exploitation and patching of eMudhra’s weak keys
- New and changed features Product news · Cloudflare services for private origins is now generally available
- Issues and security Security advisory · WAF - WAF Release - 2026-10-30 - Emergency
- Issues and security Ongoing incident · Cloudflare: Increased error rates and reduced success rates for Workflows operations
- Issues and security Service incident · Cloudflare: Increased Errors for Durable Objects and Downstream Services in Eastern North America (ENAM)
- Issues and security Service incident · Cloudflare: Increased Worker services errors
- Issues and security Service incident · Cloudflare: Issues with Durable Objects availability in Eastern Europe
- Issues and security Service incident · Cloudflare: Increased HTTP 429 Rate Limit Errors on Cloudflare Dashboard
- Issues and security Service incident · Cloudflare: R2 Elevated Latency in Eastern Europe
- Issues and security Service incident · Cloudflare: Increased errors and latency for CNI 2.0 traffic in LAX
- Issues and security Service incident · Cloudflare: Increased Durable Objects, D1 and Workflows Error Rates
- New and changed features Product news · Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants
- Issues and security Security advisory · WAF - WAF Release - 2026-10-28
- Issues and security Service incident · Cloudflare: Increased latency and error rate for R2 in ENAM
- Issues and security Service incident · Cloudflare: Network Performance Issues in Queretaro, MX
- Issues and security Service incident · Cloudflare: Increased Errors for Durable Objects in the Eastern North America region
- Issues and security Service incident · Cloudflare: Increased Errors for Durable Objects in the Eastern North America region
- Issues and security Service incident · Cloudflare: Network Performance Issues in Ashburn, IAD
- Issues and security Security advisory · WAF - Malicious uploads detection flags non-multipart Content-Type headers with a boundary
- Issues and security Service incident · Cloudflare: ERR_TIMED_OUT and ERR_EMPTY_RESPONSE being observed by Cloudflare Customers
- Issues and security Service incident · Cloudflare: Issues with AI Security for Apps
- Issues and security Service incident · Cloudflare: We are seeing some customers having issues with Workers Builds
- Issues and security Service incident · Cloudflare: Elevated Cloudflare Access API Errors
- Issues and security Service incident · Cloudflare: Cache Purging Delays Affecting Requests Routed Through EEUR
- Issues and security Service incident · Cloudflare: Some customers may notice their Pages and/or Workers builds are intermittently failing.
- Issues and security Service incident · Cloudflare: Network Error Log Processing Unavailable
- Issues and security Service incident · Cloudflare: Cloudflare Stream performance issues impacting certain Live Broadcasts and On-Demand Uploads
- New and changed features Product news · What took the Internet offline in Q3 2026
- New and changed features Product news · Introducing the Cloudflare PHP Capture the Flag challenge
- Issues and security Service incident · Cloudflare: Delayed, missed, and duplicated Workers Cron Triggers
- Issues and security Service incident · Cloudflare: Cloudflare Workers build delays
- Issues and security Service incident · Cloudflare: Cloudflare Pages Upload Issue
- Issues and security Service incident · Cloudflare: Network Performance Issues in Chicago (ORD)
- New and changed features Product news · Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
- Issues and security Security advisory · WAF - WAF Release - 2026-10-25 - Emergency - Cloudflare Managed Ruleset
- Issues and security Service incident · Cloudflare: Network Performance Issues in Ashburn
- Issues and security Service incident · Cloudflare: Increased error rate in Workflow Operations
- Issues and security Service incident · Cloudflare: Network connectivity issues affecting services in North America
- Issues and security Security advisory · WAF - WAF Release - 2026-10-23 - Emergency - Cloudflare Managed Ruleset
- Issues and security Security advisory · WAF - WAF Release - 2026-10-23 - Emergency - Cloudflare Free Ruleset
- Issues and security Service incident · Cloudflare: Delayed, missed, and duplicated Workers Cron Triggers
- Issues and security Service incident · Cloudflare: Support Helpdesk Availability Issues
- Issues and security Service incident · Cloudflare: Cloudflare Access Availability Issues
- New and changed features Product news · Origin Range Requests: Serving large files without range-request tuning
- New and changed features Product news · Bringing post-quantum cryptography to geographically fenced key management
- Issues and security Service incident · Cloudflare: Network Error Log Processing Unavailable
- Issues and security Service incident · Cloudflare: Delayed audit log delivery for WARP and Zero Trust services
- Issues and security Security advisory · WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Managed Ruleset
- Issues and security Security advisory · WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Free Ruleset
- Issues and security Service incident · Cloudflare: Elevated errors for some requests in Ashburn, Virginia
- Issues and security Service incident · Cloudflare: Cloudflare Workers API Latency
- Issues and security Service incident · Cloudflare: Network congestion in Portland and Seattle, US
- Issues and security Service incident · Cloudflare: Elevated error rates for Durable Objects in Western Europe
- New and changed features Product news · Localizing compliance at scale: Achieving South Korea’s ISMS certification
- Issues and security Service incident · Cloudflare: Elevated Errors for R2 and Durable Objects in ENAM
- Issues and security Service incident · Cloudflare: Elevated Error Rate for Durable Objects in Lisbon
- Issues and security Service incident · Cloudflare: Increased Latency in India
- New and changed features Product news · Introducing full transaction detection for Cloudflare WAF
- New and changed features Product news · How Commerce.com and Cloudflare are getting storefronts ready for AI agents
- Issues and security Product news · Cloudflare deploys protections against php2shell vulnerability
- Issues and security Security advisory · WAF - WAF Release - 2026-10-21 - Emergency - Cloudflare Managed Ruleset
- Issues and security Security advisory · WAF - WAF Release - 2026-10-21 - Emergency - Cloudflare Free Ruleset
- Issues and security Security advisory · WAF - Response custom rules
- Issues and security Service incident · Cloudflare: Cloudflare Zero Trust connectivity
- Issues and security Service incident · Cloudflare: Issue with Bot management traffic categorization for verified bots
- New and changed features Product news · 8 eMudhra certificates are compromised. Here's what you need to know
- New and changed features Product news · Introducing tsrs: A port of TypeScript to Rust
- Issues and security Service incident · Cloudflare: Cloudflare Secure Web Gateway and DLP enforcement issues for Google Gemini
- Issues and security Service incident · Cloudflare: DNS Update Delays
- New and changed features Product news · Cutting our inference bill by 68% by being obsessive about optimization
- New and changed features Product news · Introducing Clairic, a new System One class of extraction models
- Issues and security Product news · Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities
- Issues and security Service incident · Cloudflare: Network Performance Issues in Virginia and Ohio United States
- Issues and security Service incident · Cloudflare: Cloudflare Fedramp Dashboard and Access
- Issues and security Service incident · Cloudflare: Workers Cron Triggers issues
- Issues and security Service incident · Cloudflare: Cloudflare Dashboard sign up issues
- Issues and security Service incident · Cloudflare: Network Performance Issues in Thailand
- Issues and security Service incident · Cloudflare: Network issues in Incheon (ICN)
- Issues and security Service incident · Cloudflare: Cloudflare Access Availability Issues
- Issues and security Service incident · Cloudflare: Increased HTTP 5xx Errors Ashburn
- New and changed features Product news · Continuous accountability for Verified bots
- Issues and security Service incident · Cloudflare: Network Performance Issues in Eastern North America
- Issues and security Service incident · Cloudflare: Network Performance Issues in London
- Issues and security Service incident · Cloudflare: Network Performance Issues in Kuala Lumpur
- Issues and security Service incident · Cloudflare: Pages.dev sites experiencing availability issues in Norway
- Issues and security Service incident · Cloudflare: Increased Errors for Durable Objects
- Issues and security Service incident · Cloudflare: Increased HTTP 502 Errors
- Issues and security Service incident · Cloudflare: DNS Update Delays
- New and changed features Product news · Deploy with Void
- New and changed features Product news · A fully programmable secure web gateway
- New and changed features Product news · Cloudflare and OpenAI: Making AI discovery better for everyone
- New and changed features Product news · Yandex outage: Data shows that instead of going dark, malicious bots went on the move
- New and changed features Product news · Inside Hyperdrive: How we solved a rare Hyperdrive MySQL caching bug
- Issues and security Security advisory · WAF - WAF Release - 2026-10-14 - Emergency
- New and changed features Product news · Under the hood, off the hot path: How D1 scales to millions of databases
- New and changed features Product news · Rewinding the exponential: How we keep hardware usage down
- Issues and security Security advisory · WAF - WAF Release - 2026-10-12
- New and changed features Product news · Filter, reshape, and redact logs before export with Transformers
- Issues and security Security advisory · WAF, Rules - Failed detections field available in Rules
- Issues and security Security advisory · WAF - Updated unsafe topic detection for AI Security for Apps
- Issues and security Security advisory · WAF - WAF Release - 2026-10-06
- Issues and security Security advisory · WAF - WAF Release - 2026-10-01 - Emergency
September 2026
- Issues and security Security advisory · WAF - WAF Release - 2026-09-30
- Issues and security Security advisory · WAF - WAF Release - 2026-09-25 - Emergency
- Issues and security Security advisory · WAF - WAF Release - 2026-09-22
- Issues and security Security advisory · WAF - WAF Release - 2026-09-15
- Issues and security Security advisory · WAF - WAF Release - 2026-09-10 - Emergency
- Issues and security Security advisory · WAF - WAF Release - 2026-09-08
- Issues and security Security advisory · WAF - Enforce positive security with Application Profiles
- Issues and security Security advisory · WAF - Attack Signature Detection is now available in Early Access
- Issues and security Security advisory · WAF - Updated PII detection for AI Security for Apps
- Issues and security Security advisory · WAF - WAF Release - 2026-09-01
August 2026
- Issues and security Security advisory · WAF - WAF Release - 2026-08-26 - Emergency
- Issues and security Security advisory · WAF - WAF Release - 2026-08-25
- Issues and security Security advisory · WAF - Leaked credentials detection now scans Authorization headers
- Issues and security Security advisory · WAF - WAF Release - 2026-08-17
- Issues and security Security advisory · WAF - WAF Release - 2026-08-11
- Issues and security Security advisory · WAF - WAF Release - 2026-08-07
- Issues and security Security advisory · WAF - WAF Release - 2026-08-04
July 2026
- Issues and security Security advisory · WAF - WAF Release - 2026-07-29
- Issues and security Security advisory · WAF - WAF Release - 2026-07-21
- Issues and security Security advisory · WAF - WAF Release - 2026-07-17 - Emergency
- Issues and security Security advisory · WAF - WAF Release - 2026-07-14
- Issues and security Security advisory · WAF - WAF Release - 2026-07-01
June 2026
- Issues and security Security advisory · WAF - WAF Release - 2026-06-23
- Issues and security Security advisory · WAF - WAF Release - 2026-06-15
- Issues and security Security advisory · WAF - Use Cloudforce One threat intelligence in WAF rules
- Issues and security Security advisory · WAF - WAF Release - 2026-06-09
May 2026
- Issues and security Security advisory · WAF - WAF Release - 2026-05-20
- Issues and security Security advisory · WAF - WAF Release - 2026-05-15 - Emergency
- Issues and security Security advisory · WAF - WAF Release - 2026-05-11
- Issues and security Security advisory · Workers, WAF - WAF and framework adapter mitigations for React and Next.js vulnerabilities
- Issues and security Security advisory · WAF - WAF Release - 2026-05-07 - Emergency
- Issues and security Security advisory · WAF - WAF Release - 2026-05-04
April 2026
- Issues and security Security advisory · WAF - WAF Release - 2026-04-30 - Emergency
- Issues and security Security advisory · WAF - WAF Release - 2026-04-27
- Issues and security Security advisory · WAF - WAF Release - 2026-04-21
- Issues and security Security advisory · WAF - WAF Release - 2026-04-15
- Issues and security Security advisory · WAF - Email obfuscation decode script is now non-render-blocking
- Issues and security Security advisory · WAF - WAF Release - 2026-04-07
March 2026
- Issues and security Security advisory · WAF - WAF Release - 2026-03-30
- Issues and security Security advisory · WAF - WAF Release - 2026-03-23
- Issues and security Security advisory · WAF - WAF Release - 2026-03-12 - Emergency
Sorted from how each source classifies its records: what's-new pages, releases, documentation changes, notices, roadmap items, and network changes. A kind is a reading aid, not Microsoft's own category. Showing the newest 200 of 219.
About this page
3 sources
Watching for changes since 26 Sep 2026. Revisions the vendor made before then were not observed, which does not mean there were none.
Nothing about Cloudflare yet in: open known issues, dates in the next 12 months, roadmap items in progress, versions.
A change belongs to Cloudflare when it comes from a source about the product or one of its names (Cloudflare, Cloudflare One, Cloudflare Zero Trust, Cloudflare Workers), when a roadmap entry, Windows release, or known issue lists it, or when an MSRC CVE, CISA entry, or lifecycle date names it. Another product's notes and community posts that only mention Cloudflare are listed under "Also mentioned in" and are not counted as its changes. Sources marked quiet are about Cloudflare alone and have had nothing new for 30 days; check the source before reading silence as "no change".