26-062 (2026年10月15日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

DNS Server
1012729 - Windows DNS Server Buffer Overflow Vulnerability (CVE-2026-62878)


FTP Server IIS
1012733 - Microsoft Windows FTP Service Remote Code Execution Vulnerability (CVE-2026-49172)


OpenSSL
1012730 - GnuTLS DTLS Handshake Fragment Underflow Vulnerability (CVE-2026-33845)


Web Application PHP Based
1012710 - iCagenda extension for Joomla Unrestricted File Upload Vulnerability (CVE-2026-48939)


Web Application Tomcat
1012720 - ForgeRock OpenAM Insecure Deserialization Vulnerability (CVE-2021-35464)


Web Client Mozilla Firefox
1012731 - Mozilla Firefox and Thunderbird Use-After-Free Vulnerability (CVE-2026-4696)
1012736 - Mozilla Firefox/Thunderbird COLRv1 Font Integer Overflow in Graphics Component Vulnerability (CVE-2026-16357)
1012735 - Mozilla Firefox/Thunderbird Use-After-Free in FontFaceSet Vulnerability (CVE-2025-6424)


Web Server Common
1012655* - Sitecore Cms Insecure Deserialization Vulnerability (CVE-2019-9875)


Web Server HTTPS
1012739 - Microsoft Exchange Server Information Disclosure Vulnerability (CVE-2026-96940)
1012728 - libevent evhttp HTTP Request Smuggling Vulnerability (CVE-2026-63382)


Web Server IIS
1012678* - Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2026-62911)


Zimbra Proxy
1012719 - Zimbra Collaboration Suite WebEx Zimlet Forgery Vulnerability (CVE-2020-7796)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

1008670* - Microsoft Windows Security Events - 3