WAF Rule Set Update Announcement

Name waf.sig
Version 1.2.65
StoneOS Version 5.5R2-W-1.1 or above, BDS 5.5R8-3.4 or above
Release Date 2026-9-21
New Rules
(2)
Rule ID Rule Name Rule Details
1030010030 Obfuscated XSS: Indirect Sink Invocation and Evasive Event-Handler Injection Click for Details
1070210650 CVE-2026-85706:GitLab CE/EE Unauthenticated Arbitrary File Read via Forged File.Path Parameter Click for Details
Updated Rules
(1)
Rule ID Description Ruel Details
1020710011 Use SSRF to Access Local Resource Click for Details