WAF Rule Set Update Announcement

Name waf.sig
Version 1.2.63
StoneOS Version 5.5R2-W-1.1 or above, BDS 5.5R8-3.4 or above
Release Date 2026-8-24
New Rules
(1)
Rule ID Rule Name Rule Details
1060310005 Single-Layer Path Traversal Prefixes in Request Arguments Click for Details
Updated Rules
(2)
Rule ID Description Ruel Details
1070210624 CVE-2026-16723: Fastjson 1.x/2.x URL Class Loading Attacks Click for Details
1070110087 CVE-2025-2689: Yiisoft Yii2 Deserialization Exploitation Click for Details