WAF Rule Set Update Announcement
| Name | waf.sig | ||
| Version | 1.2.64 | ||
| StoneOS Version | 5.5R2-W-1.1 or above, BDS 5.5R8-3.4 or above | ||
| Release Date | 2026-9-7 | New Rules (2) |
Rule ID | Rule Name | Rule Details |
| 1070210648 | CVE-2026-63030:WordPress Core REST API Batch Route Confusion | Click for Details | |
| 1070210649 | CVE-2026-60137:WordPress Author_Exclude SQL Injection in REST API Batch Body | Click for Details | Updated Rules (8) |
Rule ID | Description | Ruel Details |
| 1020800008 | Variable Function Call | Click for Details | |
| 1090410087 | Godzilla Webshell Access (Initialization) | Click for Details | |
| 1070210226 | CVE-2020-13933: Apache Shiro <=1.6.0 Authentication Bypass Vulnerability | Click for Details | |
| 1070210266 | Weaver OA V8 File Upload Vulnerability | Click for Details | |
| 1020610007 | NoSQL Injection Attack-MongoDB Operator | Click for Details | |
| 1020610008 | NoSQL Injection Attack-Javascript Expression 1 | Click for Details | |
| 1020610009 | NoSQL Injection Attack-Javascript Expression 2 | Click for Details | |
| 1020610010 | NoSQL Injection Attack-Javascript Time Blind Injection | Click for Details | |