Version number
V7-IPS-1.0.391

MD5 number
b3b5258e03b87a9721dce2950b6bfd84

Update time
2026-01-14

Update attack list

Key new rules:
------------------------------

56994  CVE-2026-21858_n8n_Arbitrary_File_Read_Vulnerability[2]
---- Category: Vulnerability
---- Description: n8n is an open-source workflow automation platform that allows users to build automated processes through a
---- drag-and-drop interface and integrates with hundreds of services. There is an arbitrary file read vulnerability in n8n that
---- allows unauthenticated users to bypass permission controls through publicly accessible form-type workflow nodes, directly
---- accessing sensitive files on the server. By exploiting this vulnerability to read the database and configuration files, an
---- attacker can forge an administrator JWT session, execute arbitrary code in the backend, and gain full control of the server.

57010  CVE-2026-21445_Langflow_Security_Bypass_Vulnerability[2]
---- Category: Vulnerability
---- Description: Langflow is an open-source visualization framework developed by Langflow for building multi-agent and RAG applications.
---- Versions of Langflow prior to 1.7.0.dev45 contain an access control error vulnerability. This vulnerability stems from the
---- lack of authentication controls on several critical API endpoints, which could allow unauthenticated users to access sensitive
---- data and perform destructive operations.

57000  CVE-2025-14847_MongoBleed_Memory_disclosure_Vulnerability(Abnormal_Uncompressed_Size)
---- Category: Vulnerability
---- Description: This vulnerability allows attackers to directly steal sensitive data such as keys from the MongoDB server's
---- memory without requiring any authentication credentials.

Note
[1] Indicates that this change is incorporated into all security products
[2] Indicates that this change is only incorporated into the full series of F5000, T5000, T9000, M9000, F1030 and above F series products
[3] The device memory is greater than 4GB. After loading the IPS rules library file of this version, 26391 predefined rules can be generated in "Intrusion Prevention System"
[4] The device memory is equal to 4GB. After loading the IPS rules library file of this version, 15323 predefined rules can be generated in "Intrusion Prevention System"
[5] The device memory is less than or equal to 2GB. After loading the IPS rules library file of this version, 3297 predefined rules can be generated in "Intrusion Prevention System"