IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.331, 3.1.331 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2026-10-23 | |||
| XSS/SQL Injection Attack Engine Version | 1.260904 | |||
| XSS/SQL Injection Attack Engine Change Description | Refine signature matching patterns, eliminate inefficient regex backtracking, improve rule matching performance | |||
| New Signature (6) |
Rule ID | Rule Name | StoneOS | Detail |
| 346488 | Node.js Brotli Decoder Remote Code Execution Vulnerability (CVE-2026-111497) | 5.5R5 or above | click for more information | |
| 346489 | Node.js dns.resolve NUL Byte Truncation Vulnerability (CVE-2026-105482) | 5.5R5 or above | click for more information | |
| 346487 | TESI Gandia Integra Total idestudio SQL Injection Vulnerability (CVE-2025-41370) | 5.5R5 or above | click for more information | |
| 717318 | Socomec DIRIS Digiware M-70 Modbus TCP Unauthorized Address Modification Denial-of-Service Vulnerability (CVE-2025-54848) | 5.0R4 or above | click for more information | |
| 717319 | Socomec DIRIS Digiware M-70 Modbus TCP Unauthenticated Denial-of-Service Vulnerability (CVE-2024-49572) | 5.0R4 or above | click for more information | |
| 717317 | Oracle Java SE JSSE Elevation of Privilege Vulnerability (CVE-2026-91403 CVE-2026-111943) | 5.5R5 or above | click for more information | |
| Updated Signature (2) |
Rule ID | Rule Name | StoneOS | Detail |
| 346484 | PHP Core Remote Code Execution Vulnerability (CVE-2026-109618 CVE-2026-109619) | 5.5R5 or above | Click here for more information | |
| 346483 | PHP Core Remote Code Execution Vulnerability (CVE-2026-109618 CVE-2026-109619) | 5.0R4 or above | Click here for more information | |