Skip to content

Add change log about emergency waf release on Oct 30 #26164

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 30, 2025
+44 −0
Merged

Add change log about emergency waf release on Oct 30 #26164

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
933daa3
Add change log about emergency waf release on Oct 30
ay-cf Oct 30, 2025
7c2f4c5
Remove extra comma
pedrosousa Oct 30, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions src/content/changelog/waf/2025-10-30-emergency-waf-release.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,44 @@
---
title: "WAF Release - 2025-10-30 - Emergency"
description: Cloudflare WAF managed rulesets 2025-10-30 emergency release
date: 2025-10-30
---

import { RuleID } from "~/components";

This week’s release introduces a new detection signature that enhances coverage for a critical vulnerability in Oracle E-Business Suite, tracked as CVE-2025-61884.

**Key Findings**

The flaw is easily exploitable and allows an unauthenticated attacker with network access to compromise Oracle Configurator, , which can grant access to sensitive resources and configuration data. The affected versions include 12.2.3 through 12.2.14.

**Impact**

Successful exploitation of CVE-2025-61884 may result in unauthorized access to critical business data or full exposure of information accessible through Oracle Configurator. Administrators are strongly advised to apply vendor's patches and recommended mitigations to reduce this exposure.

<table style="width: 100%">
<thead>
<tr>
<th>Ruleset</th>
<th>Rule ID</th>
<th>Legacy Rule ID</th>
<th>Description</th>
<th>Previous Action</th>
<th>New Action</th>
<th>Comments</th>
</tr>
</thead>
<tbody>
<tr>
<td>Cloudflare Managed Ruleset</td>
<td>
<RuleID id="2749f13f8cb34a3dbd49c8c48827402f" />
</td>
<td>N/A</td>
<td>Oracle E-Business Suite - SSRF - CVE:CVE-2025-61884</td>
<td>N/A</td>
<td>Block</td>
<td>This is a New Detection</td>
</tr>
</tbody>
</table>