diff --git a/src/content/changelog/waf/2025-10-20-waf-release.mdx b/src/content/changelog/waf/2025-10-20-waf-release.mdx
new file mode 100644
index 000000000000000..b566732da2e8dad
--- /dev/null
+++ b/src/content/changelog/waf/2025-10-20-waf-release.mdx
@@ -0,0 +1,66 @@
+---
+title: "WAF Release - 2025-10-20"
+description: Cloudflare WAF managed rulesets 2025-10-20 release
+date: 2025-10-20
+---
+
+import { RuleID } from "~/components";
+
+This week’s update introduces an enhanced rule that expands detection coverage for a critical vulnerability in Oracle E-Business Suite. It also improves an existing rule to provide more reliable coverage in request processing.
+
+**Key Findings**
+
+New WAF rule deployed for Oracle E-Business Suite (CVE-2025-61882) to block unauthenticated attacker's network access via HTTP to compromise Oracle Concurrent Processing. If successfully exploited, this vulnerability may result in remote code execution.
+
+**Impact**
+
+- Successful exploitation of CVE-2025-61882 allows unauthenticated attackers to execute arbitrary code remotely by chaining multiple weaknesses, enabling lateral movement into internal services, data exfiltration, and large-scale extortionware deployment within Oracle E-Business Suite environments.
+
+
+
+
+ | Ruleset |
+ Rule ID |
+ Legacy Rule ID |
+ Description |
+ Previous Action |
+ New Action |
+ Comments |
+
+
+
+
+ | Cloudflare Managed Ruleset |
+
+
+ |
+ 100598A |
+ Remote Code Execution - Common Bash Bypass - Beta |
+ Log |
+ Block |
+ This rule is merged into the original rule "Remote Code Execution - Common Bash Bypass" (ID: ) |
+
+
+ | Cloudflare Managed Ruleset |
+
+
+ |
+ 100916A |
+ Oracle E-Business Suite - Remote Code Execution - CVE:CVE-2025-61882 - 2 |
+ Log |
+ Block |
+ This is a New Detection |
+
+
+ | Cloudflare Managed Ruleset |
+
+
+ |
+ N/A |
+ HTTP Truncated |
+ N/A |
+ Disabled |
+ This is a New Detection |
+
+
+
\ No newline at end of file
diff --git a/src/content/changelog/waf/scheduled-waf-release.mdx b/src/content/changelog/waf/scheduled-waf-release.mdx
index cb5a25f26853678..db49e37c28030f2 100644
--- a/src/content/changelog/waf/scheduled-waf-release.mdx
+++ b/src/content/changelog/waf/scheduled-waf-release.mdx
@@ -1,46 +1,7 @@
---
-title: WAF Release - Scheduled changes for 2025-10-20
-description: WAF managed ruleset changes scheduled for 2025-10-20
-date: 2025-10-13
+title: WAF Release - Scheduled changes for 2025-10-27
+description: WAF managed ruleset changes scheduled for 2025-10-27
+date: 2025-10-20
scheduled: true
----
-
-import { RuleID } from "~/components";
-
-
-
-
- | Announcement Date |
- Release Date |
- Release Behavior |
- Legacy Rule ID |
- Rule ID |
- Description |
- Comments |
-
-
-
-
- | 2025-10-13 |
- 2025-10-20 |
- Log |
- 100598A |
-
-
- |
- Remote Code Execution - Common Bash Bypass - Beta |
- This rule is merged into the original rule "Remote Code Execution - Common Bash Bypass" (ID: ) |
-
-
- | 2025-10-13 |
- 2025-10-20 |
- Log |
- 100916A |
-
-
- |
- Oracle E-Business Suite - Remote Code Execution - CVE:CVE-2025-61882 - 2 |
- This is a New Detection |
-
-
-
\ No newline at end of file
+hidden: true
+---
\ No newline at end of file