26-052 (September 15, 2026)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Ivanti Endpoint Manager
1012688 - Ivanti Endpoint Manager Authentication Bypass Vulnerability (CVE-2026-1603)
1012679 - Ivanti Endpoint Manager RCE Vulnerability (CVE-2025-4428)


Kentico Xperience
1012665 - Kentico Xperience Authentication Bypass Vulnerability (CVE-2025-2747)


Langflow
1012651 - Langflow Remote Code Execution Vulnerability (CVE-2025-34291)


Unix CUPS
1012689 - Openprinting Cups Print-Job Unauthorized Execution Vulnerability (CVE-2026-34980)


Unix Telnet
1012690 - Gnu Inetutils Telnetd Linemode Slc Out-Of-Bounds Write Vulnerability (CVE-2026-32746)


Web Server HTTPS
1012684 - Roundcube Webmail SQL Injection Vulnerability (CVE-2021-44026)
1012676 - Sangoma FreePBX Authentication Bypass Vulnerability (CVE-2019-19006)
1012671 - SonicWall Email Security Privilege Management Vulnerability (CVE-2021-20021)


Web Server IIS
1012687 - DotNetNuke Cookie Deserialization Remote Code Execution Vulnerability (CVE-2018-15811)
1012678 - Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2026-62911)


Web Server Oracle
1012663 - Oracle HTTP Server WebLogic Proxy Plug-in Improper Access Control Vulnerability (CVE-2026-21962)


Web Server SharePoint
1012685 - Microsoft Office SharePoint Weak Authentication Vulnerability (CVE-2026-55040)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.