diff --git a/http/vulnerabilities/other/flir-ax8-rce.yaml b/http/vulnerabilities/other/flir-ax8-rce.yaml
index 6c21aca17b..0e4d3b22b9 100644
--- a/http/vulnerabilities/other/flir-ax8-rce.yaml
+++ b/http/vulnerabilities/other/flir-ax8-rce.yaml
@@ -42,6 +42,11 @@ http:
         words:
           - '"success"'
 
+      - type: regex
+        part: body_2
+        regex:
+          - 'uid=([0-9(a-z)]+) gid=([0-9(a-z)]+)'
+
       - type: status
         status:
           - 200
@@ -50,4 +55,4 @@ http:
       - type: regex
         part: body_2
         regex:
-          - "uid=([0-9(a-z)]+) gid=([0-9(a-z)]+)"
\ No newline at end of file
+          - "uid=([0-9(a-z)]+) gid=([0-9(a-z)]+)"