Deep Security Center
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Oracle PeopleSoft PIA
1012580* - Oracle PeopleSoft PeopleTools SSRF Vulnerability (CVE-2026-35273)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Oracle PeopleSoft PIA
1012580* - Oracle PeopleSoft PeopleTools SSRF Vulnerability (CVE-2026-35273)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Server Common
1012714 - Wordpress Get_Page_Template Function Remote Code Execution Vulnerability (CVE-2026-87902)
Web Server HTTPS
1012713 - Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2026-45504)
1012697 - WordPress 'Pix for WooCommerce' Plugin Remote Code Execution Vulnerability (CVE-2026-3891)
Web Server SharePoint
1012715 - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2026-65660)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Server Common
1012714 - Wordpress Get_Page_Template Function Remote Code Execution Vulnerability (CVE-2026-87902)
Web Server HTTPS
1012713 - Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2026-45504)
1012697 - WordPress 'Pix for WooCommerce' Plugin Remote Code Execution Vulnerability (CVE-2026-3891)
Web Server SharePoint
1012715 - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2026-65660)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Ivanti Endpoint Manager
1012704 - Ivanti Epm Absolute Path Traversal Vulnerability (CVE-2024-13161)
Langflow
1012702 - Langflow Remote Code Execution Vulnerability (CVE-2026-0770)
Remote Desktop Protocol Server
1012383* - Identified RDS Local Resource Redirection Attempt
1012380* - Identified Suspicious File Transfer From RDP Redirect Drive
Web Application PHP Based
1012711 - JoomlaCK Page Builder CK Arbitrary File Upload Vulnerability (CVE-2026-56290)
Web Server Common
1012705 - OpenPLC ScadaBR Cross-Site Scripting Vulnerability (CVE-2021-26829)
1012703 - Prtg Network Monitor Local File Inclusion Vulnerability (CVE-2018-19410)
Web Server HTTPS
1012708 - Adobe Commerce Server-Side Template Injection Vulnerability (CVE-2022-24086)
1012674 - Yii Framework Remote Code Execution Vulnerability (CVE-2024-58136)
Web Server Rejetto
1012706 - Rejetto Code Injection Vulnerability (CVE-2014-6287)
Integrity Monitoring Rules:
1003019* - Application - Trend Micro Deep Security Agent / Relay
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Ivanti Endpoint Manager
1012704 - Ivanti Epm Absolute Path Traversal Vulnerability (CVE-2024-13161)
Langflow
1012702 - Langflow Remote Code Execution Vulnerability (CVE-2026-0770)
Remote Desktop Protocol Server
1012383* - Identified RDS Local Resource Redirection Attempt
1012380* - Identified Suspicious File Transfer From RDP Redirect Drive
Web Application PHP Based
1012711 - JoomlaCK Page Builder CK Arbitrary File Upload Vulnerability (CVE-2026-56290)
Web Server Common
1012705 - OpenPLC ScadaBR Cross-Site Scripting Vulnerability (CVE-2021-26829)
1012703 - Prtg Network Monitor Local File Inclusion Vulnerability (CVE-2018-19410)
Web Server HTTPS
1012708 - Adobe Commerce Server-Side Template Injection Vulnerability (CVE-2022-24086)
1012674 - Yii Framework Remote Code Execution Vulnerability (CVE-2024-58136)
Web Server Rejetto
1012706 - Rejetto Code Injection Vulnerability (CVE-2014-6287)
Integrity Monitoring Rules:
1003019* - Application - Trend Micro Deep Security Agent / Relay
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Server HTTPS
1012700 - Citrix Session Recording Remote Code Execution Vulnerability (CVE-2024-8069)
1012699 - Fortinet FortiClientEMS SQL Injection Vulnerability (CVE-2026-21643)
1012691 - GitLab CE/EE Path Traversal Vulnerability (CVE-2026-85706)
1012638* - WordPress Cross-Site Scripting Vulnerability (CVE-2026-64638)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Server HTTPS
1012700 - Citrix Session Recording Remote Code Execution Vulnerability (CVE-2024-8069)
1012699 - Fortinet FortiClientEMS SQL Injection Vulnerability (CVE-2026-21643)
1012691 - GitLab CE/EE Path Traversal Vulnerability (CVE-2026-85706)
1012638* - WordPress Cross-Site Scripting Vulnerability (CVE-2026-64638)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Ivanti Virtual Traffic Manager
1012696 - Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability (CVE-2024-7593)
Web Server HTTPS
1012698 - Cisco Smart Licensing Utility Static Credential Vulnerability (CVE-2024-20439)
1012693 - Roundcube Webmail File Disclosure Vulnerability (CVE-2017-16651)
1012683 - WordPress 'Elementor Pro' Plugin Arbitrary File Upload Vulnerability (CVE-2026-32475)
cPanel
1012628* - WebPros cPanel Code Injection Vulnerability (CVE-2026-29202)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Ivanti Virtual Traffic Manager
1012696 - Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability (CVE-2024-7593)
Web Server HTTPS
1012698 - Cisco Smart Licensing Utility Static Credential Vulnerability (CVE-2024-20439)
1012693 - Roundcube Webmail File Disclosure Vulnerability (CVE-2017-16651)
1012683 - WordPress 'Elementor Pro' Plugin Arbitrary File Upload Vulnerability (CVE-2026-32475)
cPanel
1012628* - WebPros cPanel Code Injection Vulnerability (CVE-2026-29202)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
LiteLLM
1012694 - LiteLLM Command Injection Vulnerability (CVE-2026-42271)
Web Application Common
1012686 - Krpano Panorama Viewer Reflected Cross-Site Scripting Vulnerability (CVE-2020-24901)
Web Server HTTPS
1012692 - Adobe Commerce and Magento Open Source Remote Code Execution Vulnerability (CVE-2026-75650)
1012695 - Joomla JCE Editor Extension RCE Vulnerability (CVE-2026-48907)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
LiteLLM
1012694 - LiteLLM Command Injection Vulnerability (CVE-2026-42271)
Web Application Common
1012686 - Krpano Panorama Viewer Reflected Cross-Site Scripting Vulnerability (CVE-2020-24901)
Web Server HTTPS
1012692 - Adobe Commerce and Magento Open Source Remote Code Execution Vulnerability (CVE-2026-75650)
1012695 - Joomla JCE Editor Extension RCE Vulnerability (CVE-2026-48907)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Ivanti Endpoint Manager
1012688 - Ivanti Endpoint Manager Authentication Bypass Vulnerability (CVE-2026-1603)
1012679 - Ivanti Endpoint Manager RCE Vulnerability (CVE-2025-4428)
Kentico Xperience
1012665 - Kentico Xperience Authentication Bypass Vulnerability (CVE-2025-2747)
Langflow
1012651 - Langflow Remote Code Execution Vulnerability (CVE-2025-34291)
Unix CUPS
1012689 - Openprinting Cups Print-Job Unauthorized Execution Vulnerability (CVE-2026-34980)
Unix Telnet
1012690 - Gnu Inetutils Telnetd Linemode Slc Out-Of-Bounds Write Vulnerability (CVE-2026-32746)
Web Server HTTPS
1012684 - Roundcube Webmail SQL Injection Vulnerability (CVE-2021-44026)
1012676 - Sangoma FreePBX Authentication Bypass Vulnerability (CVE-2019-19006)
1012671 - SonicWall Email Security Privilege Management Vulnerability (CVE-2021-20021)
Web Server IIS
1012687 - DotNetNuke Cookie Deserialization Remote Code Execution Vulnerability (CVE-2018-15811)
1012678 - Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2026-62911)
Web Server Oracle
1012663 - Oracle HTTP Server WebLogic Proxy Plug-in Improper Access Control Vulnerability (CVE-2026-21962)
Web Server SharePoint
1012685 - Microsoft Office SharePoint Weak Authentication Vulnerability (CVE-2026-55040)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Ivanti Endpoint Manager
1012688 - Ivanti Endpoint Manager Authentication Bypass Vulnerability (CVE-2026-1603)
1012679 - Ivanti Endpoint Manager RCE Vulnerability (CVE-2025-4428)
Kentico Xperience
1012665 - Kentico Xperience Authentication Bypass Vulnerability (CVE-2025-2747)
Langflow
1012651 - Langflow Remote Code Execution Vulnerability (CVE-2025-34291)
Unix CUPS
1012689 - Openprinting Cups Print-Job Unauthorized Execution Vulnerability (CVE-2026-34980)
Unix Telnet
1012690 - Gnu Inetutils Telnetd Linemode Slc Out-Of-Bounds Write Vulnerability (CVE-2026-32746)
Web Server HTTPS
1012684 - Roundcube Webmail SQL Injection Vulnerability (CVE-2021-44026)
1012676 - Sangoma FreePBX Authentication Bypass Vulnerability (CVE-2019-19006)
1012671 - SonicWall Email Security Privilege Management Vulnerability (CVE-2021-20021)
Web Server IIS
1012687 - DotNetNuke Cookie Deserialization Remote Code Execution Vulnerability (CVE-2018-15811)
1012678 - Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2026-62911)
Web Server Oracle
1012663 - Oracle HTTP Server WebLogic Proxy Plug-in Improper Access Control Vulnerability (CVE-2026-21962)
Web Server SharePoint
1012685 - Microsoft Office SharePoint Weak Authentication Vulnerability (CVE-2026-55040)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Kerberos KDC Server
1012681 - Windows Kerberos Remote Code Execution Vulnerability (CVE-2026-69676)
MLflow
1012667 - Mlflow Unauthenticated Endpoint Redirect Vulnerability (CVE-2026-64849)
Mail Server Common
1012666 - Zimbra Collaboration SNMP Notification Remote Code Execution Vulnerability (CVE-2026-73570)
Ray Framework
1012673 - Ray Ai Compute Engine Remote Code Execution Vulnerability (CVE-2025-62593)
Server CLDAP
1012563* - Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089)
Web Application Common
1012660 - Starlette Host Header Validation Bypass Vulnerability (CVE-2026-48710)
Web Server Common
1012672 - VMware Workspace ONE UEM Server-Side Request Forgery Vulnerability (CVE-2021-22054)
Web Server HTTPS
1012670 - Citrix Session Recording Privilege Escalation Vulnerability (CVE-2024-8068)
1012677 - DELMIA Apriso Deserialization Vulnerability (CVE-2025-5086)
1012675 - Gladinet Triofox Authentication Bypass Vulnerability (CVE-2025-12480)
1012680 - SAP Buffer Overflow Vulnerability (CVE-2026-44756)
1012682 - Windows HTTP Print Provider Remote Code Execution Vulnerability (CVE-2026-69623)
1012669 - ZKTeco BioTime Path Traversal Vulnerability (CVE-2023-38950)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Kerberos KDC Server
1012681 - Windows Kerberos Remote Code Execution Vulnerability (CVE-2026-69676)
MLflow
1012667 - Mlflow Unauthenticated Endpoint Redirect Vulnerability (CVE-2026-64849)
Mail Server Common
1012666 - Zimbra Collaboration SNMP Notification Remote Code Execution Vulnerability (CVE-2026-73570)
Ray Framework
1012673 - Ray Ai Compute Engine Remote Code Execution Vulnerability (CVE-2025-62593)
Server CLDAP
1012563* - Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089)
Web Application Common
1012660 - Starlette Host Header Validation Bypass Vulnerability (CVE-2026-48710)
Web Server Common
1012672 - VMware Workspace ONE UEM Server-Side Request Forgery Vulnerability (CVE-2021-22054)
Web Server HTTPS
1012670 - Citrix Session Recording Privilege Escalation Vulnerability (CVE-2024-8068)
1012677 - DELMIA Apriso Deserialization Vulnerability (CVE-2025-5086)
1012675 - Gladinet Triofox Authentication Bypass Vulnerability (CVE-2025-12480)
1012680 - SAP Buffer Overflow Vulnerability (CVE-2026-44756)
1012682 - Windows HTTP Print Provider Remote Code Execution Vulnerability (CVE-2026-69623)
1012669 - ZKTeco BioTime Path Traversal Vulnerability (CVE-2023-38950)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
IBM Cognos TM1 Admin Server
1012650 - IBM Planning Analytics Code Injection Vulnerability (CVE-2019-4716)
JFrog
1012668 - JFrog Artifactory Authentication Bypass Vulnerability (CVE-2026-82329)
Kentico Xperience
1012646 - Kentico Xperience Directory Traversal Vulnerability (CVE-2025-2749)
SmarterTools SmarterMail
1012647 - SmarterMail ConnectToHub Unauthenticated RCE (CVE-2026-24423)
Web Application Common
1012659 - Kestra Authentication Bypass Vulnerability (CVE-2026-49869)
Web Application PHP Based
1012656 - Mirasvit Cache Warmer Deserialization Vulnerability (CVE-2026-45247)
Web Server Common
1012662 - Gitea Diffpatch API Git Hook Remote Code Execution Vulnerability (CVE-2026-60004)
1012653 - Sitecore Cms Insecure Deserialization Vulnerability (CVE-2019-9874)
1012655 - Sitecore Cms Insecure Deserialization Vulnerability (CVE-2019-9875)
Web Server HTTPS
1012657 - ATEN Unizon writeFileToHttp Directory Traversal Information Disclosure Vulnerability (CVE-2026-9776)
1012658 - Laravel Livewire Code Injection Vulnerability (CVE-2025-54068)
1012664 - Sangoma Switchvox SQL Injection Vulnerability (CVE-2026-9586)
Web Server SharePoint
1012652 - Microsoft SharePoint Remote Code Execution Vulnerability (CVE-2026-20963)
ZohoCorp ManageEngine Desktop Central
1012642 - Zoho ManageEngine Desktop Central Filter Configuration Authentication Bypass Vulnerability (CVE-2021-44515)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
IBM Cognos TM1 Admin Server
1012650 - IBM Planning Analytics Code Injection Vulnerability (CVE-2019-4716)
JFrog
1012668 - JFrog Artifactory Authentication Bypass Vulnerability (CVE-2026-82329)
Kentico Xperience
1012646 - Kentico Xperience Directory Traversal Vulnerability (CVE-2025-2749)
SmarterTools SmarterMail
1012647 - SmarterMail ConnectToHub Unauthenticated RCE (CVE-2026-24423)
Web Application Common
1012659 - Kestra Authentication Bypass Vulnerability (CVE-2026-49869)
Web Application PHP Based
1012656 - Mirasvit Cache Warmer Deserialization Vulnerability (CVE-2026-45247)
Web Server Common
1012662 - Gitea Diffpatch API Git Hook Remote Code Execution Vulnerability (CVE-2026-60004)
1012653 - Sitecore Cms Insecure Deserialization Vulnerability (CVE-2019-9874)
1012655 - Sitecore Cms Insecure Deserialization Vulnerability (CVE-2019-9875)
Web Server HTTPS
1012657 - ATEN Unizon writeFileToHttp Directory Traversal Information Disclosure Vulnerability (CVE-2026-9776)
1012658 - Laravel Livewire Code Injection Vulnerability (CVE-2025-54068)
1012664 - Sangoma Switchvox SQL Injection Vulnerability (CVE-2026-9586)
Web Server SharePoint
1012652 - Microsoft SharePoint Remote Code Execution Vulnerability (CVE-2026-20963)
ZohoCorp ManageEngine Desktop Central
1012642 - Zoho ManageEngine Desktop Central Filter Configuration Authentication Bypass Vulnerability (CVE-2021-44515)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
DHCP Server
1012640 - Windows DHCP Server Remote Code Execution Vulnerability (CVE-2026-50518)
Kentico Xperience
1012648 - Kentico Xperience Staging Service Authentication Bypass Vulnerability (CVE-2025-2746)
PaperCut
1012649 - PaperCut Authentication Bypass and RCE Vulnerability (CVE-2026-81578 and CVE-2026-82078)
Web Server Common
1012643 - Zabbix Authentication Bypass Vulnerability (CVE-2022-23134)
Web Server HTTPS
1012645 - Adminer Server-Side Request Forgery Vulnerability (CVE-2021-21311)
1012654 - SimpleHelp OpenID Connect Authentication Bypass Vulnerability (CVE-2026-48558)
Web Server Oracle
1012624 - Oracle Java SE Sandbox Bypass Vulnerability (CVE-2025-30761)
Integrity Monitoring Rules:
1002853* - Application - Apache Tomcat
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
DHCP Server
1012640 - Windows DHCP Server Remote Code Execution Vulnerability (CVE-2026-50518)
Kentico Xperience
1012648 - Kentico Xperience Staging Service Authentication Bypass Vulnerability (CVE-2025-2746)
PaperCut
1012649 - PaperCut Authentication Bypass and RCE Vulnerability (CVE-2026-81578 and CVE-2026-82078)
Web Server Common
1012643 - Zabbix Authentication Bypass Vulnerability (CVE-2022-23134)
Web Server HTTPS
1012645 - Adminer Server-Side Request Forgery Vulnerability (CVE-2021-21311)
1012654 - SimpleHelp OpenID Connect Authentication Bypass Vulnerability (CVE-2026-48558)
Web Server Oracle
1012624 - Oracle Java SE Sandbox Bypass Vulnerability (CVE-2025-30761)
Integrity Monitoring Rules:
1002853* - Application - Apache Tomcat
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.