26-065 (2026年10月22日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

NetBIOS Name Service
1012732 - Samba WINS Hook OS Command Injection Vulnerability (CVE-2025-10230)


Unix CUPS Client
1012160* - CUPS Command Injection Vulnerability (CVE-2024-47176, CVE-2024-47175)


Web Application PHP Based
1012744 - Drupal Core Remote Code Execution Vulnerability (CVE-2020-13671)


Web Client Common
1012741 - RARLAB WinRAR Directory Traversal Vulnerability (CVE-2025-6218)


Web Server HTTPS
1012746 - Ahsay AhsayCBS OS Command Injection Vulnerability (CVE-2026-105134)
1012716 - IBM Langflow OSS Code Injection Vulnerability (CVE-2026-9198)
1012748 - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2026-63514)
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
1012754 - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 2
1012723 - SAP Commerce Cloud Code Injection Vulnerability (CVE-2026-58231)
1012738 - Sitecore Multiple Products TemplateParser Code Execution Vulnerability (CVE-2023-35813)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.