26-080 (2026年11月12日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

FTP Server Linux
1012782 - vsftpd Backdoor Command Execution Vulnerability (CVE-2011-2523)


Unix Samba Client
1012795 - Linux Kernel SMB Client Coalesce_T2() Out-Of-Bounds Read/Write Vulnerability (CVE-2026-89633)


VoIP Smart
1012798 - FreeSWITCH SIP MESSAGE Handler Command Injection Vulnerability (CVE-2026-116779)


Web Application Common
1012797 - Yealink Device Management Remote Code Execution Vulnerability (CVE-2021-27561)


Web Server Common
1012785 - Apache Tomcat HTTP/2 Request Smuggling Vulnerability (CVE-2026-86350)


Web Server HTTPS
1012799 - Accellion File Transfer Appliance SQL Injection Vulnerability (CVE-2021-27101)
1012796 - Mitel MiCollab Path Traversal Vulnerability (CVE-2024-55550)
1012786 - Node.js TLS Certificate IPv4 dNSName SAN Vulnerability (CVE-2026-105483)


Zimbra Proxy
1012790 - Zimbra Collaboration Suite Cross-Site Scripting Vulnerability (CVE-2024-27443)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.