26-061 (2026年10月13日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Web Application Tomcat
1012718 - Commvault QCommand Path Traversal Vulnerability (CVE-2025-57790)


Web Server Common
1012662* - Gitea Diffpatch API Git Hook Remote Code Execution Vulnerability (CVE-2026-60004)


Web Server HTTPS
1012727 - Cisco Catalyst SD-WAN Manager Authentication Bypass Vulnerability (CVE-2026-76504)
1012677* - DELMIA Apriso Deserialization Vulnerability (CVE-2025-5086)
1012724 - WordPress 'Gravity SMTP' Plugin Information Disclosure Vulnerability (CVE-2026-4020)
1012717 - Wordpress 'bookingpress-appointment-booking-pro' Plugin Authentication Bypass Vulnerability (CVE-2026-9830)
1012726 - libevent HTTP Parsing NUL Byte Vulnerability (CVE-2026-63385)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.