New WAF Objects: [total: 5]
==================================
Policy:
  name: |-
    CVE-2026-109618, CVE-2026-109619: PHP RCE - session-upload-progress-id-memory-disclosure
  id: '20000424'
  minimum version: '10.0'
  predicates:
  - type: HTTP Request Parameter Name
    operation: At Least One
    values:
    - PHP_SESSION_UPLOAD_PROGRESS
  - type: HTTP Request
    operation: Match All
    match values:
    - part: header
      name: Content-Type
      operation: includes
      value: multipart/form-data
  - type: HTTP Request Method
    operation: At Least One
    values:
    - POST

Policy:
  name: 'CVE-2026-109618, CVE-2026-109619: PHP-RCE Long Response Cookie Ver 14.7'
  id: '20000417'
  minimum version: '14.7'
  maximum version: '14.7'
  predicates:
  - type: HTTP Response Cookies Value Max Length
    operation: Greater Than
    name: PHPSESSID
    match type: exact
    value: '257'

Policy:
  name: 'CVE-2026-109618, CVE-2026-109619: PHP-RCE Long Response Cookie Ver 15.5'
  id: '20000416'
  minimum version: '15.5'
  maximux version: '15.9'
  predicates:
  - type: HTTP Response Cookies Value Max Length
    operation: Greater Than
    name: PHPSESSID
    match type: exact
    value: '257'

Signature:
    ID: '708607'
    Name: 'CVE-2026-40281, CVE-2026-42589: Gotenberg - Unauthenticated RCE'
    Attack: Remote Command Execution - Blocking
    Attack Class: Remote Command Execution
    Dictionary: Recommended for Blocking for Web Applications
    Pattern: part="/forms/pdfengines/metadata/write", part="metadata", rgxp="metadata=[\s\S]*(\\r|\\n)-"
    Policy: Recommended Signatures Policy for Web Applications
    Search In:
    - url-and-parameters

Signature:
    ID: '708606'
    Name: 'CVE-2026-21589: Atlassian Bitbucket/Jira/Conflunce - Arbitrary File Read
    via Path Traversal'
    Attack: Directory Traversal
    Attack Class: Directory Traversal
    Dictionary: Recommended for Blocking for Web Applications
    Pattern: part="download/resources/", rgxp="download\/resources\/[\s\S]{0,200}\.\.::"
    Policy: Recommended Signatures Policy for Web Applications
    Search In:
    - url