Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

RULE（RULE ID：345246）

Rule General Information


Release Date:		2026-07-21

Rule Name:		Fastjson 1.2.83 Deserialization vulnerability (CVE-2026-16723)

Severity:

CVE ID:

Rule Protection Details


Description:		Fastjson is a high-performance Java language JSON processor developed by Alibaba. It is used to serialize Java classes into JSON format and also to deserialize JSON strings back into Java classes. Several versions of Fastjson have deserialization vulnerabilities, allowing attackers to exploit these vulnerabilities to execute arbitrary code. This rule is used to prevent attackers from bypassing AutoType through nested @type.

Impact:		An attacker can carefully construct malicious serialized data and pass it to the application, and execute the malicious code constructed by the attacker when the application deserializes the object.

Affected OS:		Windows, Linux, Others

Reference:

Solutions

Upgrade Fastjson to version 2.0 or enable SafeMode.