waf release - 3rd Nov (#26256)

Author: fb1337

src/content/changelog/waf/2025-11-03-waf-release.mdx

@@ -0,0 +1,44 @@
+---
+title: "WAF Release - 2025-11-03"
+description: Cloudflare WAF managed rulesets 2025-11-03 release
+date: 2025-11-03
+---
+
+import { RuleID } from "~/components";
+
+This week highlights enhancements to detection signatures improving coverage for vulnerabilities in Adobe Commerce and Magento Open Source, linked to CVE-2025-54236.
+
+**Key Findings**
+
+This vulnerability allows unauthenticated attackers to take over customer accounts through the Commerce REST API and, in certain configurations, may lead to remote code execution. The latest update provides enhanced detection logic for resilient protection against exploitation attempts.
+
+**Impact**
+
+- Adobe Commerce (CVE-2025-54236): Exploitation may allow attackers to hijack sessions, execute arbitrary commands, steal data, and disrupt storefronts, resulting in confidentiality and integrity risks for merchants. Administrators are strongly encouraged to apply vendor patches without delay.
+
+<table style="width: 100%">
+	<thead>
+		<tr>
+			<th>Ruleset</th>
+			<th>Rule ID</th>
+			<th>Legacy Rule ID</th>
+			<th>Description</th>
+			<th>Previous Action</th>
+			<th>New Action</th>
+			<th>Comments</th>
+		</tr>
+	</thead>
+	<tbody>
+		<tr>
+			<td>Cloudflare Managed Ruleset</td>
+			<td>
+				<RuleID id="f5295d8333b7428c816654d8cb6d5fe5" />
+			</td>
+			<td>100774C</td>
+			<td>Adobe Commerce - Remote Code Execution - CVE:CVE-2025-54236</td>
+			<td>Log</td>
+			<td>Block</td>
+			<td>This is an improved detection.</td>
+		</tr>
+	</tbody>
+</table>

src/content/changelog/waf/scheduled-waf-release.mdx

@@ -1,7 +1,7 @@
 ---
-title: WAF Release - Scheduled changes for 2025-11-03
-description: WAF managed ruleset changes scheduled for 2025-11-03
-date: 2025-10-27
+title: WAF Release - Scheduled changes for 2025-11-10
+description: WAF managed ruleset changes scheduled for 2025-11-10
+date: 2025-11-03
 scheduled: true
 ---
 
@@ -22,18 +22,7 @@ import { RuleID } from "~/components";
 	<tbody>
 	<tr>
 		<td>2025-10-27</td>
-		<td>2025-11-03</td>
-		<td>Log</td>
-		<td>100774</td>
-		<td>
-			<RuleID id="f5295d8333b7428c816654d8cb6d5fe5" />
-		</td>
-		<td>Adobe Commerce - Remote Code Execution - CVE:CVE-2025-54236</td>
-		<td>This is a new detection</td>
-	</tr>
-	<tr>
-		<td>2025-10-27</td>
-		<td>2025-11-03</td>
+		<td>2025-11-10</td>
 		<td>Log</td>
 		<td>N/A</td>
 		<td>
@@ -44,7 +33,7 @@ import { RuleID } from "~/components";
 	</tr>
 	<tr>
 		<td>2025-10-27</td>
-		<td>2025-11-03</td>
+		<td>2025-11-10</td>
 		<td>Log</td>
 		<td>N/A</td>
 		<td>
@@ -55,7 +44,7 @@ import { RuleID } from "~/components";
 	</tr>
 	<tr>
 		<td>2025-10-27</td>
-		<td>2025-11-03</td>
+		<td>2025-11-10</td>
 		<td>Log</td>
 		<td>N/A</td>
 		<td>
@@ -66,47 +55,14 @@ import { RuleID } from "~/components";
 	</tr>
 	<tr>
 		<td>2025-10-27</td>
-		<td>2025-11-03</td>
+		<td>2025-11-10</td>
 		<td>Log</td>
 		<td>N/A</td>
 		<td>
-			<RuleID id="833078bdcfa04bb7aa7b8fb67efbeb39" />
+			<RuleID id="818d92d370654c3d8f1adc7c9029cd61" />
 		</td>
 		<td>HTTP Truncated Beta</td>
 		<td>This is a beta detection and will replace the action on original detection (ID: <RuleID id="646bccf7e9dc46918a4150d6c22b51d3" />)  </td>
 	</tr>
-	<tr>
-		<td>2025-10-27</td>
-		<td>2025-11-03</td>
-		<td>Disabled</td>
-		<td>N/A</td>
-		<td>
-			<RuleID id="5f2a6681a2b94442b23816286d060a0d" />
-		</td>
-		<td>Generic Rules - Command Execution - URI - Beta</td>
-		<td>We have updated the rule logic</td>
-	</tr>
-	<tr>
-		<td>2025-10-27</td>
-		<td>2025-11-03</td>
-		<td>Disabled</td>
-		<td>N/A</td>
-		<td>
-			<RuleID id="e7ee67e824844754b513cdf3836855a4" />
-		</td>
-		<td>Generic Rules - Command Execution - Header - Beta</td>
-		<td>We have updated the rule logic</td>
-	</tr>
-	<tr>
-		<td>2025-10-27</td>
-		<td>2025-11-03</td>
-		<td>Disabled</td>
-		<td>N/A</td>
-		<td>
-			<RuleID id="aa21c9b8b97743bfb217748b2049a60c" />
-		</td>
-		<td>Generic Rules - Command Execution - Body - Beta</td>
-		<td>We have updated the rule logic</td>
-	</tr>
 	</tbody>
 </table>