WAF - WAF Release - 2025-11-24
BetaUnverifiedAdded Sep 24, 2026
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in FortiWeb, linked to CVE-2025-64446, alongside new detection logic expanding protection against PHP Wrapper Injection techniques. Key Findings This vulnerability enables an unauthenticated attacker to bypass access controls by abusing the CGIINFO header.
Topics: Security, Observability, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Nov 24 | Radar - Cloud Services Observability in Cloudflare Radarunverified Update | Update |
| Nov 25 | API Shield - New Zombie API detection for API Shieldunverified Update | Update |
| Nov 25 | Cache - Audit Logs for Cache Purge Eventsunverified Update | Update |
| Nov 25 | Workers AI - Launching FLUX.2 [dev] on Workers AIunverified Update | Update |
| Nov 26 | Agents, Workers - Agents SDK v0.2.24 with resumable streaming, MCP improvements, and schedule fixesunverified Update | Update |
| Nov 21 | Containers, R2 - Mount R2 buckets in Containersunverified Update | Update |
| Nov 21 | Containers - New CPU Pricing for Containers and Sandboxesunverified Pricing | Pricing |
| Nov 21 | Security Center - Threat insights are now available in the Threat Events platformunverified Update | Update |
Also shipped on Nov 24, 2025
Cloudflare in November 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Nov 24 |  Okta | Express Configuration is now Generally Available for Auth0 SaaS apps in the Okta Integration Networkunverified | Auth0 | GA |
| Nov 24 |  Cerebras | We now support Predicted Outputs for faster generation when large portions of the output are known in advanceunverified | Cerebras Inference | Update |
| Nov 24 |  Deepgram | Nova-3 Model Updateunverified | Deepgram | Update |
| Nov 24 |  Netlify | Claude Opus 4.5 now live in AI Gateway, plus latest Claude Code via Agent Runnersunverified | Netlify | Update |
| Nov 24 |  Expo | Require Two-Factor Authentication for Organization Membersunverified | Expo | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.