26-071 (2026年10月28日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

DNS Server
1012756 - Samba DNS Name Compression Denial Of Service Vulnerability (CVE-2020-10745)


Directory Server LDAP
1012753 - Red Hat FreeIPA Anonymous LDAP ADD Authentication Bypass Vulnerability (CVE-2026-76578)


SAP NetWeaver Visual Composer
1012760 - SAP NetWeaver Visual Composer Deserialization Vulnerability (CVE-2025-42999)


Web Application Common
1012752 - Mozilla PDF.js Arbitrary JavaScript Code Execution Vulnerability (CVE-2024-4367)


Web Application Ruby Based
1012755 - Zammad Remote Code Execution Vulnerability (CVE-2026-102489)


Web Application Tomcat
1012757 - Apache Tomcat Number Guess Example Cross-Site Scripting Vulnerability (CVE-2026-50229)


Web Server HTTPS
1012761 - Google and Node.js Brotli Decoder Buffer Overflow Vulnerability (CVE-2026-111497)
1012766 - PHP Application Out-of-Memory Vulnerability


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.