WAF - WAF Release - 2025-11-03
UpdateUnverifiedAdded Sep 24, 2026
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in Adobe Commerce and Magento Open Source, linked to CVE-2025-54236. Key Findings This vulnerability allows unauthenticated attackers to take over customer accounts through the Commerce REST API and, in certain configurations, may lead to remote code execution.
Topics: Security, Observability, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Nov 3 | Workers - Capture Wrangler command output in structured formatunverified Update | Update |
| Nov 4 | Log Explorer - Log Explorer now supports query cancellationunverified Update | Update |
| Nov 4 | Log Explorer - Log Explorer now shows query result distributionunverified Update | Update |
| Nov 5 | D1, Workers - D1 can restrict data localization with jurisdictionsunverified Update | Update |
| Nov 5 | Logs - Logpush Permission Update for Zero Trust Datasetsunverified Update | Update |
| Nov 5 | WAF - WAF Release - 2025-11-05 - Emergencyunverified Update | Update |
| Nov 5 | Workers VPC - Announcing Workers VPC Services (Beta)unverified Beta | Beta |
| Nov 6 | Cloudflare One, Cloudflare WAN - Automatic Return Routing (Beta)unverified Beta | Beta |
Also shipped on Nov 3, 2025
Cloudflare in November 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Nov 3 |  Cerebras | Deprecated llama-4-scout-17b-16e-instruct See Deprecations for more detailsunverified | Cerebras Inference | Deprecation |
| Nov 3 |  Google Cloud | 2.32.0 (2025-10-28)unverified | Pub/Sub | Update |
| Nov 3 | Google Cloud | 2.33.0 (2025-10-30)unverified | Pub/Sub | Update |
| Nov 3 |  Replicate | Deployment setup monitoringunverified | Replicate | Update |
| Nov 3 |  Sentry | Subscription Page Updatesunverified | Sentry | Update |
| Nov 3 |  Okta | Prompt for Organization Name Without SSOunverified | Auth0 | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.