26-032 (2026年7月7日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Splunk Enterprise
1012595 - Splunk Enterprise Authentication Bypass Vulnerability (CVE-2026-20253)


Web Application PHP Based
1012574* - WordPress 'StoryChief' Plugin Unauthenticated RCE (CVE-2025-7441)


Web Server HTTPS
1012597 - Allegra Directory Traversal Information Disclosure Vulnerability (CVE-2026-11442)


Web Server Miscellaneous
1012572* - Adobe Commerce Improper Input Validation (CVE-2025-54236)
1012579* - Crawl4AI Hooks Code Execution Vulnerability (CVE-2026-26216)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.