Skip to content
Cloudflare Docs

Scheduled changes

Subscribe to RSS

2026-01-20


WAF Release - Scheduled changes for 2026-01-26

The planned release has been postponed to ensure a smooth deployment.

Announcement DateRelease DateRelease BehaviorLegacy Rule IDRule IDDescriptionComments
2025-12-012026-01-26LogN/A XWiki - Remote Code Execution - CVE:CVE-2025-24893 2This is a new detection. The rule has been renamed to "Wiki - Remote Code Execution - CVE-2025-24893 2", previously known as "XWiki - Remote Code Execution - CVE-2025-24893 – Beta".
2025-12-012026-01-26LogN/A Django SQLI - CVE:CVE-2025-64459This is a new detection.

For other WAF updates, refer to the changelog.