HTTP: Marimo Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
This signature detects attempts to exploit a known vulnerability against Marimo. A successful attack can lead to arbitrary code execution.
References
CVE: CVE-2026-39987
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
vsrx-19.2
srx-19.3