26-054 (2026年9月22日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Ivanti Virtual Traffic Manager
1012696 - Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability (CVE-2024-7593)


Web Server HTTPS
1012698 - Cisco Smart Licensing Utility Static Credential Vulnerability (CVE-2024-20439)
1012693 - Roundcube Webmail File Disclosure Vulnerability (CVE-2017-16651)
1012683 - WordPress 'Elementor Pro' Plugin Arbitrary File Upload Vulnerability (CVE-2026-32475)


cPanel
1012628* - WebPros cPanel Code Injection Vulnerability (CVE-2026-29202)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.