WAF - WAF Release - 2025-10-23 - Emergency
UpdateUnverifiedAdded Sep 24, 2026
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in Adobe Commerce and Magento Open Source, linked to CVE-2025-54236. Key Findings This vulnerability allows unauthenticated attackers to take over customer accounts through the Commerce REST API and, in certain configurations, may lead to remote code execution.
Topics: Security, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Oct 23 | Workers AI - Workers AI Markdown Conversion: New endpoint to list supported formatsunverified Update | Update |
| Oct 23 | Workers - Workers Preview URL default behavior now matches your workers.dev settingunverified Preview | Preview |
| Oct 24 | WAF - WAF Release - 2025-10-24 - Emergencyunverified Update | Update |
| Oct 24 | Workers - Automatic resource provisioning for KV, R2, and D1unverified Beta | Beta |
| Oct 24 | Workers - Build TanStack Start apps with the Cloudflare Vite pluginunverified Update | Update |
| Oct 21 | AI Crawl Control - New Robots.txt tab for tracking crawler complianceunverified Update | Update |
| Oct 20 | Gateway - Schedule DNS policies from the UIunverified Update | Update |
| Oct 20 | WAF - WAF Release - 2025-10-20unverified Beta | Beta |
Also shipped on Oct 23, 2025
Cloudflare in October 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Oct 23 |  Tailscale | Tailscale v1.90.1unverified | Tailscale | GA |
| Oct 23 |  Grafana Labs | Save, reuse, and share dashboard annotation queriesunverified | Grafana Cloud | Preview |
| Oct 23 |  Netlify | Skew protection now availableunverified | Netlify | Update |
| Oct 23 |  Linear | Linear agent for Slackunverified | Linear | Update |
| Oct 23 |  Figma | New features in Figma Buzzunverified | Figma | Update |
| Oct 23 |  Shopify | Updated online store promotion app store requirementunverified | Shopify developer platform | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.