OGO Security - Notice history

• New virtual patch - CVE-2025-61757

• Upgrade SQL injection and openredirect drives

• [fix] Could not set advanced site parameters in some cases

• API: will now return 401 status instead of 200 if auth token is missing or invalid

[Fix] My account/My Organization: tabs other than "Parameters" sometimes not showing

• Enhanced command injection detection

• Minor improvements & fixes

• Added virtual patches for in-the-wild CVE exploits

• Minor improvements & fixes

• Rollback IWA update

• Upgrade SQL Injection Drives

• Various optimisations

• Upgrade IWA module

• TLS security update

• Added virtual patches for in-the-wild CVE exploits

• Minor improvements & fixes

When updating a site with the API, tags, rules and rewrite rules were removed if not specified in the update.

New feature: IP Categories. Available for sites in Advanced mode.

• Boost credibility scoring when other anomalies are detected, or block specific IP categories such as Tor, VPN, Open Proxies, or Malware / C2 / Botnet.

• [fix] the PDF report did not take the selected tag into account

• More informative error message when adding a duplicate IP in a site's IP exceptions

• Minor improvements & fixes