WAF - WAF Release - 2025-09-28 - Emergency
UpdateUnverifiedAdded Sep 24, 2026
This week highlights multiple critical Cisco vulnerabilities (CVE-2025-20363, CVE-2025-20333, CVE-2025-20362). This flaw stems from improper input validation in HTTP(S) requests. An authenticated VPN user could send crafted requests to execute code as root, potentially compromising the device.
Topics: Security
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Sep 29 | Radar - Regional Data in Cloudflare Radarunverified Update | Update |
| Sep 29 | WAF - WAF Release - 2025-09-29unverified Update | Update |
| Sep 30 | Cloudflare One Client - WARP client for Windows (version 2025.7.176.0)unverified GA | GA |
| Sep 30 | Cloudflare One Client - WARP client for macOS (version 2025.7.176.0)unverified GA | GA |
| Sep 30 | Cloudflare One Client - WARP client for Linux (version 2025.7.176.0)unverified GA | GA |
| Sep 30 | Gateway - Application granular controls for operations in SaaS applicationsunverified Update | Update |
| Sep 26 | WAF - WAF Release - 2025-09-26unverified Update | Update |
| Sep 26 | Workers - Automatic loopback bindings via ctx.exportsunverified Update | Update |
Also shipped on Sep 28, 2025
Cloudflare in September 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Sep 28 |  Bun | Bun v1.2.23unverified | Bun | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.