WAF - WAF Release - 2025-09-24 - Emergency
UpdateUnverifiedAdded Sep 24, 2026
This week highlights a critical vendor-specific vulnerability: a deserialization flaw in the License Servlet of Fortra’s GoAnywhere MFT. By forging a license response signature, an attacker can trigger deserialization of arbitrary objects, potentially leading to command injection.
Topics: Security
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Sep 25 | Pipelines - Pipelines now supports SQL transformations and Apache Icebergunverified Update | Update |
| Sep 25 | R2 SQL - Announcing R2 SQLunverified Beta | Beta |
| Sep 25 | Browser Run - Browser Rendering Playwright GA, Stagehand support (Beta), and higher limitsunverified GA | GA |
| Sep 25 | AI Search - AI Search (formerly AutoRAG) now with More Models To Choose Fromunverified Update | Update |
| Sep 25 | Containers - Run more Containers with higher resource limitsunverified Update | Update |
| Sep 25 | Gateway, Data Loss Prevention - Refine DLP Scans with New Body Phase Selectorunverified Update | Update |
| Sep 25 | Cloudflare Fundamentals - Sign in with GitHubunverified Update | Update |
| Sep 25 | Cloudflare Fundamentals - SSO for allunverified Update | Update |
Also shipped on Sep 24, 2025
Cloudflare in September 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Sep 24 |  Google Cloud | For jobs that use GPUs, Dataflow now supports the flex-start provisioning modelunverified | Dataflow | Preview |
| Sep 24 |  Figma | Figma integration for Zapierunverified | Figma | Update |
| Sep 24 |  Resend | Tags for Batch and Scheduled Emailsunverified | Resend | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.