26-075 (2026年11月3日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Web Application PHP Based
1012709 - Joomla extension Balbooa Forms Unrestricted File Upload Vulnerability (CVE-2026-56291)


Web Server Common
1012768 - Ivanti Endpoint Manager Mobile Unauthenticated API Access Vulnerability (CVE-2023-35082)
1012770 - Output Messenger Directory Traversal File Upload Vulnerability (CVE-2025-27920)
1012764* - Pillow ImagingJpegDecode Heap Buffer Overflow Vulnerability (CVE-2026-112403)


Web Server HTTPS
1012725* - ONLYOFFICE Document Server Path Traversal Vulnerability (CVE-2021-3199)
1012707 - Sitecore Experience Platform Deserialization Vulnerability (CVE-2021-42237)
1012740* - WordPress Core WP_Query SQL Injection Vulnerability (CVE-2026-60137)


Web Server IIS
1012771 - Advantive VeraCore SQL Injection Vulnerability (CVE-2025-25181)


Zimbra Proxy
1012772 - Synacor Zimbra Collaboration Suite Cross-Site Scripting Vulnerability (CVE-2023-37580)


Integrity Monitoring Rules:

1002780* - Microsoft Windows - Installed software attributes modified (ATT&CK T1195.002, T1554)


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.