26-056 (2026年9月29日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Ivanti Endpoint Manager
1012704 - Ivanti Epm Absolute Path Traversal Vulnerability (CVE-2024-13161)


Langflow
1012702 - Langflow Remote Code Execution Vulnerability (CVE-2026-0770)


Remote Desktop Protocol Server
1012383* - Identified RDS Local Resource Redirection Attempt
1012380* - Identified Suspicious File Transfer From RDP Redirect Drive


Web Application PHP Based
1012711 - JoomlaCK Page Builder CK Arbitrary File Upload Vulnerability (CVE-2026-56290)


Web Server Common
1012705 - OpenPLC ScadaBR Cross-Site Scripting Vulnerability (CVE-2021-26829)
1012703 - Prtg Network Monitor Local File Inclusion Vulnerability (CVE-2018-19410)


Web Server HTTPS
1012708 - Adobe Commerce Server-Side Template Injection Vulnerability (CVE-2022-24086)
1012674 - Yii Framework Remote Code Execution Vulnerability (CVE-2024-58136)


Web Server Rejetto
1012706 - Rejetto Code Injection Vulnerability (CVE-2014-6287)


Integrity Monitoring Rules:

1003019* - Application - Trend Micro Deep Security Agent / Relay


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.