Skip to content

Commit ec7b4c4

Browse files
authored
Add Change log for WAF Emergency release on Oct 23. (#26007)
* Add Change log for WAF Emergency release on Oct 23. * add new line to modify format
1 parent 3fe14e2 commit ec7b4c4

File tree

1 file changed

+44
-0
lines changed

1 file changed

+44
-0
lines changed
Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
---
2+
title: "WAF Release - 2025-10-23 - Emergency"
3+
description: Cloudflare WAF managed rulesets 2025-10-23 emergency release
4+
date: 2025-10-23
5+
---
6+
7+
import { RuleID } from "~/components";
8+
9+
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in Adobe Commerce and Magento Open Source, linked to CVE-2025-54236.
10+
11+
**Key Findings**
12+
13+
This vulnerability allows unauthenticated attackers to take over customer accounts through the Commerce REST API and, in certain configurations, may lead to remote code execution. The latest update enhances detection logic to provide more resilient protection against exploitation attempts.
14+
15+
**Impact**
16+
17+
Adobe Commerce (CVE-2025-54236): Exploitation may allow attackers to hijack sessions, execute arbitrary commands, steal data, and disrupt storefronts, resulting in confidentiality and integrity risks for merchants. Administrators are strongly encouraged to apply vendor patches without delay.
18+
19+
<table style="width: 100%">
20+
<thead>
21+
<tr>
22+
<th>Ruleset</th>
23+
<th>Rule ID</th>
24+
<th>Legacy Rule ID</th>
25+
<th>Description</th>
26+
<th>Previous Action</th>
27+
<th>New Action</th>
28+
<th>Comments</th>
29+
</tr>
30+
</thead>
31+
<tbody>
32+
<tr>
33+
<td>Cloudflare Managed Ruleset</td>
34+
<td>
35+
<RuleID id="6e04fa2b9eb34fb088034d3fc6ef59a1" />
36+
</td>
37+
<td>N/A</td>
38+
<td>Adobe Commerce - Remote Code Execution - CVE:CVE-2025-54236</td>
39+
<td>N/A</td>
40+
<td>Block</td>
41+
<td>This is a New Detection</td>
42+
</tr>
43+
</tbody>
44+
</table>

0 commit comments

Comments
 (0)