IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.325, 3.1.325 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2026-09-14 | |||
| XSS/SQL Injection Attack Engine Version | 1.260904 | |||
| XSS/SQL Injection Attack Engine Change Description | Refine signature matching patterns, eliminate inefficient regex backtracking, improve rule matching performance | |||
| New Signature (149) |
Rule ID | Rule Name | StoneOS | Detail |
| 346008 | D-Link DIR-605L Buffer Overflow Vulnerability (CVE-2024-9533) | 5.5R5 or above | click for more information | |
| 346070 | Linksys Devices RP_pingGatewayByBBS Buffer Overflow Vulnerability (CVE-2025-9248) | 5.5R5 or above | click for more information | |
| 346025 | NocoBase myInAppChannels:list Filter SQL Injection Vulnerability (CVE-2026-52887) | 5.5R5 or above | click for more information | |
| 345980 | FW-WGS 804HPT Stack Buffer Overflow Vulnerability (CVE-2025-44895) | 5.5R5 or above | click for more information | |
| 346087 | ORing IAP-420 Stored XSS Vulnerability (CVE-2024-5410) | 5.5R5 or above | click for more information | |
| 346042 | GLPI Fields Plugin Remote Code Execution Vulnerability (CVE-2026-23489) | 5.5R5 or above | click for more information | |
| 717282 | Fluentd out_file Tag Path Traversal Remote Code Execution Vulnerability (CVE-2026-44024) | 5.0R4 or above | click for more information | |
| 346104 | Tenda AX-1803 fast_setting_wifi_set Buffer Overflow Vulnerability (CVE-2025-63458) | 5.5R5 or above | click for more information | |
| 346063 | D-Link Devices Buffer Overflow Vulnerability (CVE-2022-27293) | 5.5R5 or above | click for more information | |
| 345986 | UTT HiPER formUserStatusRemark Buffer Overflow Vulnerability (CVE-2025-11653) | 5.5R5 or above | click for more information | |
| 346048 | Ruijie RG-UAC online_check.php Command Injection Vulnerability (CVE-2024-5339) | 5.5R5 or above | click for more information | |
| 346007 | D-Link DCS-932L OS Command Injection Vulnerability (CVE-2025-5571) | 5.5R5 or above | click for more information | |
| 346069 | Intelbras RX1500 Integer Overflow Vulnerability (CVE-2025-50404) | 5.5R5 or above | click for more information | |
| 346020 | MISP Event Ordering SQL Injection Vulnerability (CVE-2026-44381) | 5.5R5 or above | click for more information | |
| 345979 | FW-WGS 804HPT Stack Buffer Overflow Vulnerability (CVE-2025-44898) | 5.5R5 or above | click for more information | |
| 346082 | NETGEAR Routers httpd pppoe_localip Buffer Overflow Vulnerability (CVE-2024-51011) | 5.5R5 or above | click for more information | |
| 346041 | IBM Langflow OSS Code Injection Vulnerability (CVE-2026-9198) | 5.5R5 or above | click for more information | |
| 345996 | Oracle E-Business Suite UiServlet SSRF Vulnerability (CVE-2025-61882) | 5.0R4 or above | click for more information | |
| 346103 | Tenda AC500 setWtpData Buffer Overflow Vulnerability (CVE-2025-7586) | 5.5R5 or above | click for more information | |
| 346058 | Commvault CommServe QLogin Authentication Bypass Vulnerability (CVE-2025-57791) | 5.5R8 or above | click for more information | |
| ...... | ||||
| Updated Signature (18) |
Rule ID | Rule Name | StoneOS | Detail |
| 337017 | Tool Ysoserial Detection | 5.0R4 or above | Click here for more information | |
| 323713 | phpMyAdmin Authenticated Remote Code Execution Vulnerability (CVE-2016-5734) | 5.0R4 or above | Click here for more information | |
| 338614 | PHP Trojan Detection | 5.5R5 or above | Click here for more information | |
| 307085 | Microsoft Paint JPEG Image Parsing Integer Overflow Vulnerability -1 (CVE-2010-0028) | 5.5R4 or above | Click here for more information | |
| 339488 | ZipSlip Vulnerability Detection(CVE-2024-52012) | 5.0R4 or above | Click here for more information | |
| 333889 | Sensitive Directory .idea Access Detection | 5.0R4 or above | Click here for more information | |
| 335125 | Scanner Masscan Detection | 5.5R5 or above | Click here for more information | |
| 339487 | ZipSlip Vulnerability Detection(CVE-2024-52012) | 5.0R4 or above | Click here for more information | |
| 335456 | WordPress Loginizer SQL Injection Vulnerability (CVE-2017-12650) | 5.5R5 or above | Click here for more information | |
| 331342 | Android Browser and WebView addJavascriptInterface Code Execution Vulnerability (CVE-2013-4710) | 5.0R4 or above | Click here for more information | |
| 332673 | Trojan Activity: PowerShell NonInteractive Command Common In Powershell Stagers | 5.0R4 or above | Click here for more information | |
| 708833 | CA ARCserve Backup Authentication Service Invalid Virtual Function Call (CVE-2012-2971) | 5.5R4 or above | Click here for more information | |
| 715659 | Tool Ysoserial Detection | 5.0R4 or above | Click here for more information | |
| 705526 | Microsoft Paint JPEG Image Parsing Integer Overflow Vulnerability -1 (CVE-2010-0028) | 5.5R4 or above | Click here for more information | |
| 345745 | Linksys E5600 DynDNS Command Injection Vulnerability (CVE-2025-45490) | 5.5R5 or above | Click here for more information | |
| 345060 | D-Link DIR 878A1 SetDynamicDNSSettings Command Injection Vulnerability (CVE-2025-60672) | 5.5R8 or above | Click here for more information | |
| 333696 | ACTi Video Surveillance Arbitrary File Read Vulnerability | 5.0R4 or above | Click here for more information | |
| 716994 | PHP Trojan Detection | 5.5R5 or above | Click here for more information | |