Waf release 20th Oct (#25941)

* Waf release 20th Oct

* fix

* scheduled fix

Author: fb1337

src/content/changelog/waf/2025-10-20-waf-release.mdx

@@ -0,0 +1,66 @@
+---
+title: "WAF Release - 2025-10-20"
+description: Cloudflare WAF managed rulesets 2025-10-20 release
+date: 2025-10-20
+---
+
+import { RuleID } from "~/components";
+
+This week’s update introduces an enhanced rule that expands detection coverage for a critical vulnerability in Oracle E-Business Suite. It also improves an existing rule to provide more reliable coverage in request processing.
+
+**Key Findings**
+
+New WAF rule deployed for Oracle E-Business Suite (CVE-2025-61882) to block  unauthenticated attacker's network access via HTTP to compromise Oracle Concurrent Processing. If successfully exploited, this vulnerability may result in remote code execution.
+
+**Impact**
+
+- Successful exploitation of CVE-2025-61882 allows unauthenticated attackers to execute arbitrary code remotely by chaining multiple weaknesses, enabling lateral movement into internal services, data exfiltration, and large-scale extortionware deployment within Oracle E-Business Suite environments.
+
+<table style="width: 100%">
+	<thead>
+		<tr>
+			<th>Ruleset</th>
+			<th>Rule ID</th>
+			<th>Legacy Rule ID</th>
+			<th>Description</th>
+			<th>Previous Action</th>
+			<th>New Action</th>
+			<th>Comments</th>
+		</tr>
+	</thead>
+	<tbody>
+		<tr>
+			<td>Cloudflare Managed Ruleset</td>
+			<td>
+				<RuleID id="933fc13202cd4e8ba498c0f32b4101ab" />
+			</td>
+			<td>100598A</td>
+			<td>Remote Code Execution - Common Bash Bypass - Beta</td>
+			<td>Log</td>
+			<td>Block</td>
+			<td>This rule is merged into the original rule "Remote Code Execution - Common Bash Bypass" (ID: <RuleID id="f8238867ed3e4d3a9a7b731a50cec478" />)</td>
+		</tr>         
+		<tr>
+			<td>Cloudflare Managed Ruleset</td>
+			<td>
+				<RuleID id="185b5df42d1e44e0aeb8f8b8a1118614" />
+			</td>
+			<td>100916A</td>
+			<td>Oracle E-Business Suite - Remote Code Execution - CVE:CVE-2025-61882 - 2</td>
+			<td>Log</td>
+			<td>Block</td>
+			<td>This is a New Detection</td>
+		</tr>
+		<tr>
+			<td>Cloudflare Managed Ruleset</td>
+			<td>
+				<RuleID id="646bccf7e9dc46918a4150d6c22b51d3" />
+			</td>
+			<td>N/A</td>
+			<td>HTTP Truncated</td>
+			<td>N/A</td>
+			<td>Disabled</td>
+			<td>This is a New Detection</td>
+		</tr>
+	</tbody>
+</table>

src/content/changelog/waf/scheduled-waf-release.mdx

@@ -1,46 +1,7 @@
 ---
-title: WAF Release - Scheduled changes for 2025-10-20
-description: WAF managed ruleset changes scheduled for 2025-10-20
-date: 2025-10-13
+title: WAF Release - Scheduled changes for 2025-10-27
+description: WAF managed ruleset changes scheduled for 2025-10-27
+date: 2025-10-20
 scheduled: true
----
-
-import { RuleID } from "~/components";
-
-<table style="width: 100%">
-  <thead>
-    <tr>
-      <th>Announcement Date</th>
-      <th>Release Date</th>
-      <th>Release Behavior</th>
-      <th>Legacy Rule ID</th>
-      <th>Rule ID</th>
-      <th>Description</th>
-      <th>Comments</th>
-    </tr>
-  </thead>
-  <tbody>
-   <tr>
-      <td>2025-10-13</td>
-      <td>2025-10-20</td>
-      <td>Log</td>
-      <td>100598A</td>
-      <td>
-        <RuleID id="933fc13202cd4e8ba498c0f32b4101ab" />
-      </td>
-      <td>Remote Code Execution - Common Bash Bypass - Beta</td>
-      <td>This rule is merged into the original rule "Remote Code Execution - Common Bash Bypass" (ID: <RuleID id="f8238867ed3e4d3a9a7b731a50cec478" />)</td>
-   </tr>
-   <tr>
-      <td>2025-10-13</td>
-      <td>2025-10-20</td>
-      <td>Log</td>
-      <td>100916A</td>
-      <td>
-        <RuleID id="185b5df42d1e44e0aeb8f8b8a1118614" />
-      </td>
-      <td>Oracle E-Business Suite - Remote Code Execution - CVE:CVE-2025-61882 - 2</td>
-      <td>This is a New Detection</td>
-   </tr> 
-  </tbody>
-</table>
+hidden: true
+---