WAF - WAF Release - 2025-09-28 - Emergency
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2025-20363, CVE-2025-20333, CVE-2025-20362
No access to your tenant or devices. Every item links to its source. What this means
Week 39 · 22 Sep – 28 Sep 2025 UTC · assess the changes, then plan the next dates.
SecurityCloudflare
Security advisory · Cloudflare WAF changelog
Release notes name CVE-2025-20363, CVE-2025-20333, CVE-2025-20362
CommunityNathan McNulty
Community post · Nathan McNulty
Updates and guidanceAzure
Message CenterMicrosoft 365 Message Center Archive by Merill Fernando
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Power Automate
ReleasesAzure Kubernetes Service
Tool release · Azure Kubernetes Service release notes
Release notes name CVE-2025-47907, CVE-2025-22874, CVE-2025-47906
CommunityMaester
Community post · Maester blog
Updates and guidanceAzure Arc
Updates and guidanceAzure3 source records
Updates and guidanceMicrosoft Graph8 source records
Graph announcement · 8 passages · Microsoft Graph changelog
Publisher announcement group; its passages may describe different API changes
Message CenterMicrosoft 365 Apps2 source records
Message Center · Plan for change · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft 365 apps
Message CenterMicrosoft 365 Message Center Archive by Merill Fernando2 source records
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft 365 suite
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft 365 suite
Message CenterTeams2 source records
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Teams
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Teams
Message CenterWindows
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Windows
ReleasesEntra PowerShell
Tool release · Entra PowerShell releases
ReleasesVisual Studio Code
New version · GitHub release record · package availability may differ
ReleasesWinGet
New version · GitHub release record · package availability may differ
ReleasesWindows Terminal
New version · GitHub release record · package availability may differ
SecurityCloudflare
SecurityCisco2 source records
Cisco · exploited, added to CISA KEV
CVE-2025-20362
CISA lists it as exploited
Cisco · exploited, added to CISA KEV
CVE-2025-20333
CISA lists it as exploited
Updates and guidanceAzure2 source records
Updates and guidanceMicrosoft Graph4 source records
Graph announcement · 4 passages · Microsoft Graph changelog
Publisher announcement group; its passages may describe different API changes
Message CenterDynamics 365
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Dynamics 365 Apps
Message CenterViva2 source records
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Viva
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Viva
Message CenterWindows
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.