IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.329, 3.1.329 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2026-10-19 | |||
| XSS/SQL Injection Attack Engine Version | 1.260904 | |||
| XSS/SQL Injection Attack Engine Change Description | Refine signature matching patterns, eliminate inefficient regex backtracking, improve rule matching performance | |||
| New Signature (24) |
Rule ID | Rule Name | StoneOS | Detail |
| 2205208 | Scanner NMAP Detection - SIP Scan | 5.0R4 or above | click for more information | |
| 346423 | Sangoma Freepbx Authentication Bypass Vulnerability (CVE-2019-19006) | 5.5R5 or above | click for more information | |
| 717305 | PostgreSQL to_char Timezone Abbreviation Heap Buffer Overflow Vulnerability (CVE-2026-14669) | 5.5R5 or above | click for more information | |
| 346419 | Vercel Next.js Windows Incremental Cache Path Traversal Vulnerability (CVE-2026-75604) | 5.0R4 or above | click for more information | |
| 1909037 | Scanner NMAP Detection - SMB Scan 2 | 5.0R4 or above | click for more information | |
| 717309 | VMware vCenter Syslog Directory Traversal Vulnerability (CVE-2026-59310) | 5.5R5 or above | click for more information | |
| 346436 | Dahua EIMS capture_handle.action Command Injection Vulnerability (CVE-2024-13985) | 5.5R5 or above | click for more information | |
| 346422 | Metabase reset_password SQL Injection Vulnerability (CVE-2026-72898) | 5.5R5 or above | click for more information | |
| 346418 | Chanjet T+ AccountExtendRuleController Deserialization Vulnerability | 5.0R4 or above | click for more information | |
| 1909036 | Scanner NMAP Detection - SMB Scan 1 | 5.0R4 or above | click for more information | |
| 346439 | WordPress Core get_page_template Path Traversal Vulnerability (CVE-2026-87902) | 5.5R5 or above | click for more information | |
| 346415 | JeecgBoot Authentication Bypass and SQL Injection Vulnerability | 5.5R5 or above | click for more information | |
| 346425 | OneDev AttachmentUploadServlet Deserialization Vulnerability (CVE-2021-21242) | 5.0R4 or above | click for more information | |
| 717312 | Scanner NMAP Detection - TLS Scan 1 | 5.0R4 or above | click for more information | |
| 346421 | MyPrestaModules Prestashop Module PHPInfo Disclosure Vulnerability (CVE-2023-39677) | 5.0R4 or above | click for more information | |
| 346438 | GitLab CE/EE Arbitrary File Read Vulnerability (CVE-2026-85706) | 5.5R5 or above | click for more information | |
| 346397 | Cisco SD-WAN vManage Counters deviceId Query Injection Vulnerability (CVE-2020-3387) | 5.5R5 or above | click for more information | |
| 346417 | KubePi Unauthenticated SSO Configuration Access Vulnerability (CVE-2026-65956) | 5.5R10 or above | click for more information | |
| 346424 | Nuance Winscribe Dictation Exporter Login SQL Injection Vulnerability (CVE-2021-37599) | 5.5R5 or above | click for more information | |
| 346420 | MyPrestaModules Prestashop Module PHPInfo Disclosure Vulnerability (CVE-2023-39677) | 5.0R4 or above | click for more information | |
| ...... | ||||
| Updated Signature (2) |
Rule ID | Rule Name | StoneOS | Detail |
| 310912 | Elasticsearch Arbitrary Java Code Execution Vulnerability (CVE-2014-3120) | 5.5R5 or above | Click here for more information | |
| 717187 | Shell Command Execution Detection | 5.5R5 or above | Click here for more information | |