26-051 (September 10, 2026)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Kerberos KDC Server
1012681 - Windows Kerberos Remote Code Execution Vulnerability (CVE-2026-69676)


MLflow
1012667 - Mlflow Unauthenticated Endpoint Redirect Vulnerability (CVE-2026-64849)


Mail Server Common
1012666 - Zimbra Collaboration SNMP Notification Remote Code Execution Vulnerability (CVE-2026-73570)


Ray Framework
1012673 - Ray Ai Compute Engine Remote Code Execution Vulnerability (CVE-2025-62593)


Server CLDAP
1012563* - Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089)


Web Application Common
1012660 - Starlette Host Header Validation Bypass Vulnerability (CVE-2026-48710)


Web Server Common
1012672 - VMware Workspace ONE UEM Server-Side Request Forgery Vulnerability (CVE-2021-22054)


Web Server HTTPS
1012670 - Citrix Session Recording Privilege Escalation Vulnerability (CVE-2024-8068)
1012677 - DELMIA Apriso Deserialization Vulnerability (CVE-2025-5086)
1012675 - Gladinet Triofox Authentication Bypass Vulnerability (CVE-2025-12480)
1012680 - SAP Buffer Overflow Vulnerability (CVE-2026-44756)
1012682 - Windows HTTP Print Provider Remote Code Execution Vulnerability (CVE-2026-69623)
1012669 - ZKTeco BioTime Path Traversal Vulnerability (CVE-2023-38950)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.