WAF - WAF Release - 2025-12-01
UpdateUnverifiedAdded Sep 24, 2026
This week’s release introduces new detections for remote code execution attempts targeting Monsta FTP (CVE-2025-34299), alongside improvements to an existing XSS detection to enhance coverage.
Topics: Security, Observability, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Dec 2 | WAF - WAF Release - 2025-12-02 - Emergencyunverified Update | Update |
| Dec 3 | Email security - Reclassifications to Submissionsunverified Update | Update |
| Dec 3 | WAF - WAF Release - 2025-12-03 - Emergencyunverified Update | Update |
| Dec 4 | Hyperdrive - Connect to remote databases during local development with wrangler devunverified Update | Update |
| Dec 4 | Workers - One-click Access protection for Workers now creates reusable Cloudflare Access policiesunverified Preview | Preview |
| Dec 5 | Cloudflare Fundamentals, Terraform - Terraform v5.14.0 now availableunverified Update | Update |
| Dec 5 | WAF - Increased WAF payload limit for all plansunverified Update | Update |
| Dec 5 | WAF - Updating the WAF maximum payload valuesunverified Update | Update |
Also shipped on Dec 1, 2025
Cloudflare in December 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Dec 2025 |  xAI | Grok Speech to Speech API is releasedunverified | xAI API | GA |
| Dec 1 |  Grafana Labs | Restore deleted dashboardsunverified | Grafana Cloud | Preview |
| Dec 1 |  Netlify | Netlify Vite Plugin now supports AI Gateway locallyunverified | Netlify | Update |
| Dec 1 |  Sentry | UI Profiling support for Browser JavaScript and Electronunverified | Sentry | Update |
| Dec 1 | Sentry | Send Logs to Sentry via the OpenTelemetry Collector, Vector, or Fluent Bitunverified | Sentry | Update |
| Dec 1 | Grafana Labs | Alert rule list page updatesunverified | Grafana Cloud | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.