26-063 (2026年10月20日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Directory Server LDAP
1012742 - VMware vCenter Server vmdir Authentication Bypass Vulnerability (CVE-2026-59309)


Splunk Patroni REST API
1012745 - Splunk Enterprise Remote Code Execution Vulnerability (CVE-2026-76268)


WSO2
1012722 - WSO2 Products JWT Algorithm Confusion Authentication Bypass (CVE-2026-5430)


Web Server Common
1012737 - Mozilla Firefox HTTP Content-Type Header Confusion Vulnerability (CVE-2026-4700)


Web Server HTTPS
1012743 - Ahsay AhsayCBS Authentication Bypass Vulnerability (CVE-2026-105133)
1012725 - ONLYOFFICE Document Server Path Traversal Vulnerability (CVE-2021-3199)
1012740 - WordPress Core WP_Query SQL Injection Vulnerability (CVE-2026-60137)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.