26-050 (September 8, 2026)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

IBM Cognos TM1 Admin Server
1012650 - IBM Planning Analytics Code Injection Vulnerability (CVE-2019-4716)


JFrog
1012668 - JFrog Artifactory Authentication Bypass Vulnerability (CVE-2026-82329)


Kentico Xperience
1012646 - Kentico Xperience Directory Traversal Vulnerability (CVE-2025-2749)


SmarterTools SmarterMail
1012647 - SmarterMail ConnectToHub Unauthenticated RCE (CVE-2026-24423)


Web Application Common
1012659 - Kestra Authentication Bypass Vulnerability (CVE-2026-49869)


Web Application PHP Based
1012656 - Mirasvit Cache Warmer Deserialization Vulnerability (CVE-2026-45247)


Web Server Common
1012662 - Gitea Diffpatch API Git Hook Remote Code Execution Vulnerability (CVE-2026-60004)
1012653 - Sitecore Cms Insecure Deserialization Vulnerability (CVE-2019-9874)
1012655 - Sitecore Cms Insecure Deserialization Vulnerability (CVE-2019-9875)


Web Server HTTPS
1012657 - ATEN Unizon writeFileToHttp Directory Traversal Information Disclosure Vulnerability (CVE-2026-9776)
1012658 - Laravel Livewire Code Injection Vulnerability (CVE-2025-54068)
1012664 - Sangoma Switchvox SQL Injection Vulnerability (CVE-2026-9586)


Web Server SharePoint
1012652 - Microsoft SharePoint Remote Code Execution Vulnerability (CVE-2026-20963)


ZohoCorp ManageEngine Desktop Central
1012642 - Zoho ManageEngine Desktop Central Filter Configuration Authentication Bypass Vulnerability (CVE-2021-44515)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.