26-003 (2026年1月20日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

HP Intelligent Management Center (IMC)
1012451* - Apache OFBiz Argument Injection Vulnerability (CVE-2025-54466) - 1
1012452* - Apache OFBiz Argument Injection Vulnerability (CVE-2025-54466) - 2


Web Server Adobe ColdFusion
1012414* - Adobe ColdFusion Command Injection Vulnerability (CVE-2025-43562)
1012408* - Adobe ColdFusion Command Injection Vulnerability (CVE-2025-49537)
1012407* - Adobe ColdFusion Stored Cross-Site Scripting Vulnerability (CVE-2025-49542)


Web Server Apache Tika
1012514 - Apache Tika XML External Entity Vulnerability (CVE-2025-66516)


Web Server HTTPS
1012515 - GeoServer XML External Entity Vulnerability (CVE-2025-58360)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.