WAF Rule Set Update Announcement
| Name | waf.sig | ||
| Version | 1.2.62 | ||
| StoneOS Version | 5.5R2-W-1.1 or above, BDS 5.5R8-3.4 or above | ||
| Release Date | 2026-8-10 | New Rules (37) |
Rule ID | Rule Name | Rule Details |
| 1070210626 | SmartBI Encoded Runtime Command Expression Exploitation | Click for Details | |
| 1070210627 | CVE-2026-27886: Strapi Sensitive Creator Relation Filtering Activity | Click for Details | |
| 1070210628 | CVE-2022-23940: SuiteCRM Scheduled Reports PHP Deserialization Exploitation | Click for Details | |
| 1070210629 | Typecho Installation Configuration PHP Deserialization Exploitation | Click for Details | |
| 1070210630 | Seeyon OA saveFormula4Cloud JNDI Code Injection | Click for Details | |
| 1070210631 | CVE-2023-32314: Vm2 Sandbox RCE Via Asynchronous Error.stack Escape Exploitation | Click for Details | |
| 1070210632 | CVE-2024-31982: XWiki DatabaseSearch Groovy Macro Injection Exploitation | Click for Details | |
| 1070210633 | CVE-2024-31996: XWiki PanelLayout Velocity Macro Injection Exploitation | Click for Details | |
| 1070210634 | CVE-2023-37462: XWiki Skin Sheet Page Name Macro Injection Exploitation | Click for Details | |
| 1070210635 | CVE-2025-7787: XXL-JOB HTTP Job Handler Remote URL Activity | Click for Details | |
| 1070210636 | YzmCMS Payment Callback Array Function Injection Exploitation | Click for Details | |
| 1070210637 | CVE-2025-5140 External URL in Seeyon thirdMenu | Click for Details | |
| 1070210638 | CVE-2026-22679: E-Cology dubboApi Debug Runtime Command Execution Exploitation | Click for Details | |
| 1070210639 | Landray EIS Basic Information-Query Activity | Click for Details | |
| 1070210640 | MetaCRM EAI Base32 Fastjson Autotype Payload | Click for Details | |
| 1070210641 | Mingyuan Real Estate ERP System WFWebService Deserialization Vulnerability Exploit | Click for Details | |
| 1070210642 | ezOFFICE Download_Old Path Traversal | Click for Details | |
| 1070210643 | Yonyou U8 Cloud Costsubj.Assign SQL Injection | Click for Details | |
| 1070210644 | Yonyou U8 Cloud MARosterPhotoServlet SQL Injection | Click for Details | |
| 1070210645 | Yonyou U8 Cloud QuerySoapServlet SQL Injection | Click for Details | |
| 1070210646 | Yonyou U8 Cloud Returnleave Submit SQL Injection | Click for Details | |
| 1070210647 | Yonyou U9Cloud PatchFile Arbitrary Server-Side Script Write | Click for Details | |
| 1070110087 | Yiisoft Yii2 Deserialization Exploitation | Click for Details | |
| 1070310287 | Tenda router uploadWewifiPic Command Injection Exploitation | Click for Details | |
| 1070310288 | TOTOLINK N600R downloadFlile Command Injection Exploitation | Click for Details | |
| 1070310289 | CVE-2025-59287: WSUS Report Event Unsafe Deserialization Exploitation | Click for Details | |
| 1070310290 | CVE-2024-29973: Zyxel NAS setCookie Command Injection Exploitation | Click for Details | |
| 1070310291 | Bohua Diagnostics Interface Command Injection Exploitation | Click for Details | |
| 1070310292 | TOPSEC Session Cookie Command Injection | Click for Details | |
| 1070310293 | TG MP Series Holo-ELV AI Management Platform Ping Interface Command Injection | Click for Details | |
| 1070310294 | Western Digital My Cloud modUserName Command Injection | Click for Details | |
| 1070310295 | Western Digital My Cloud Remote Backup Job Command Injection | Click for Details | |
| 1070310296 | CVE-2022-26210: TOTOLINK Firmware Upgrade Filename Command Injection Exploitation | Click for Details | |
| 1070310297 | CVE-2024-42905 DCME Ping Host Command Injection | Click for Details | |
| 1070310298 | CVE-2025-54322 XSpeeder SXZOS chkid Command Injection Vulnerability | Click for Details | |
| 1070310299 | Western Digital NAS FTP Task Command Injection | Click for Details | |
| 1070310300 | Unibox Router Billing Session PHP Command Execution Exploitation | Click for Details | Updated Rules (3) |
Rule ID | Description | Ruel Details |
| 1030000116 | Detect XSS Injection with Disallowed HTML Attributes | Click for Details | |
| 1070210624 | Fastjson 1.x/2.x URL Class Loading Attacks | Click for Details | |
| 1020510001 | Disable Uncommon Protocols In ARGS for Blocking SSRF Attack | Click for Details | |