26-024 (2026年6月2日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

IRC Client Common
1012569 - Unrealircd Command Execution Vulnerability (CVE-2010-2075)


Langflow
1012551* - Langflow Remote Code Execution Vulnerability (CVE-2026-33017)


LiteLLM
1012558* - BerryAI LiteLLM SQL Injection Vulnerability (CVE-2026-42208)


OfficeScan
1002843* - OfficeScan 'cgiRecvFile.exe' Buffer Overflow
1010039* - OfficeScan Directory Traversal Vulnerability (CVE-2019-18187)


Owntone-Server
1012570* - Owntone-Server Recursive Buffer Overflow Vulnerability (CVE-2025-44560)


Solr Service
1012571 - Apache Solr Input Validation Vulnerability (CVE-2026-22444)


Trend Micro Control Manager
1004890* - Control Manager 'CmdProcessor.exe' Remote Code Execution Vulnerability


Web Server HTTPS
1012548 - WordPress 'Advanced Forms' Plugin Remote Code Execution Vulnerability (CVE-2025-13486)
1012566 - WordPress 'Ninja Forms' Plugin Arbitrary File Upload Vulnerability (CVE-2026-0740)


Web Server Miscellaneous
1012572 - Adobe Commerce Improper Input Validation (CVE-2025-54236)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.