Deep Security Center
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Application PHP Based
1012749 - PHP Application Remote Code Execution Vulnerability
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Application PHP Based
1012749 - PHP Application Remote Code Execution Vulnerability
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Directory Server LDAP
1012742 - VMware vCenter Server vmdir Authentication Bypass Vulnerability (CVE-2026-59309)
Splunk Patroni REST API
1012745 - Splunk Enterprise Remote Code Execution Vulnerability (CVE-2026-76268)
WSO2
1012722 - WSO2 Products JWT Algorithm Confusion Authentication Bypass (CVE-2026-5430)
Web Server Common
1012737 - Mozilla Firefox HTTP Content-Type Header Confusion Vulnerability (CVE-2026-4700)
Web Server HTTPS
1012743 - Ahsay AhsayCBS Authentication Bypass Vulnerability (CVE-2026-105133)
1012725 - ONLYOFFICE Document Server Path Traversal Vulnerability (CVE-2021-3199)
1012740 - WordPress Core WP_Query SQL Injection Vulnerability (CVE-2026-60137)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Directory Server LDAP
1012742 - VMware vCenter Server vmdir Authentication Bypass Vulnerability (CVE-2026-59309)
Splunk Patroni REST API
1012745 - Splunk Enterprise Remote Code Execution Vulnerability (CVE-2026-76268)
WSO2
1012722 - WSO2 Products JWT Algorithm Confusion Authentication Bypass (CVE-2026-5430)
Web Server Common
1012737 - Mozilla Firefox HTTP Content-Type Header Confusion Vulnerability (CVE-2026-4700)
Web Server HTTPS
1012743 - Ahsay AhsayCBS Authentication Bypass Vulnerability (CVE-2026-105133)
1012725 - ONLYOFFICE Document Server Path Traversal Vulnerability (CVE-2021-3199)
1012740 - WordPress Core WP_Query SQL Injection Vulnerability (CVE-2026-60137)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
DNS Server
1012729 - Windows DNS Server Buffer Overflow Vulnerability (CVE-2026-62878)
FTP Server IIS
1012733 - Microsoft Windows FTP Service Remote Code Execution Vulnerability (CVE-2026-49172)
OpenSSL
1012730 - GnuTLS DTLS Handshake Fragment Underflow Vulnerability (CVE-2026-33845)
Web Application PHP Based
1012710 - iCagenda extension for Joomla Unrestricted File Upload Vulnerability (CVE-2026-48939)
Web Application Tomcat
1012720 - ForgeRock OpenAM Insecure Deserialization Vulnerability (CVE-2021-35464)
Web Client Mozilla Firefox
1012731 - Mozilla Firefox and Thunderbird Use-After-Free Vulnerability (CVE-2026-4696)
1012736 - Mozilla Firefox/Thunderbird COLRv1 Font Integer Overflow in Graphics Component Vulnerability (CVE-2026-16357)
1012735 - Mozilla Firefox/Thunderbird Use-After-Free in FontFaceSet Vulnerability (CVE-2025-6424)
Web Server Common
1012655* - Sitecore Cms Insecure Deserialization Vulnerability (CVE-2019-9875)
Web Server HTTPS
1012739 - Microsoft Exchange Server Information Disclosure Vulnerability (CVE-2026-96940)
1012728 - libevent evhttp HTTP Request Smuggling Vulnerability (CVE-2026-63382)
Web Server IIS
1012678* - Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2026-62911)
Zimbra Proxy
1012719 - Zimbra Collaboration Suite WebEx Zimlet Forgery Vulnerability (CVE-2020-7796)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1008670* - Microsoft Windows Security Events - 3
Deep Packet Inspection Rules:
DNS Server
1012729 - Windows DNS Server Buffer Overflow Vulnerability (CVE-2026-62878)
FTP Server IIS
1012733 - Microsoft Windows FTP Service Remote Code Execution Vulnerability (CVE-2026-49172)
OpenSSL
1012730 - GnuTLS DTLS Handshake Fragment Underflow Vulnerability (CVE-2026-33845)
Web Application PHP Based
1012710 - iCagenda extension for Joomla Unrestricted File Upload Vulnerability (CVE-2026-48939)
Web Application Tomcat
1012720 - ForgeRock OpenAM Insecure Deserialization Vulnerability (CVE-2021-35464)
Web Client Mozilla Firefox
1012731 - Mozilla Firefox and Thunderbird Use-After-Free Vulnerability (CVE-2026-4696)
1012736 - Mozilla Firefox/Thunderbird COLRv1 Font Integer Overflow in Graphics Component Vulnerability (CVE-2026-16357)
1012735 - Mozilla Firefox/Thunderbird Use-After-Free in FontFaceSet Vulnerability (CVE-2025-6424)
Web Server Common
1012655* - Sitecore Cms Insecure Deserialization Vulnerability (CVE-2019-9875)
Web Server HTTPS
1012739 - Microsoft Exchange Server Information Disclosure Vulnerability (CVE-2026-96940)
1012728 - libevent evhttp HTTP Request Smuggling Vulnerability (CVE-2026-63382)
Web Server IIS
1012678* - Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2026-62911)
Zimbra Proxy
1012719 - Zimbra Collaboration Suite WebEx Zimlet Forgery Vulnerability (CVE-2020-7796)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1008670* - Microsoft Windows Security Events - 3
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Application Tomcat
1012718 - Commvault QCommand Path Traversal Vulnerability (CVE-2025-57790)
Web Server Common
1012662* - Gitea Diffpatch API Git Hook Remote Code Execution Vulnerability (CVE-2026-60004)
Web Server HTTPS
1012727 - Cisco Catalyst SD-WAN Manager Authentication Bypass Vulnerability (CVE-2026-76504)
1012677* - DELMIA Apriso Deserialization Vulnerability (CVE-2025-5086)
1012724 - WordPress 'Gravity SMTP' Plugin Information Disclosure Vulnerability (CVE-2026-4020)
1012717 - Wordpress 'bookingpress-appointment-booking-pro' Plugin Authentication Bypass Vulnerability (CVE-2026-9830)
1012726 - libevent HTTP Parsing NUL Byte Vulnerability (CVE-2026-63385)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Application Tomcat
1012718 - Commvault QCommand Path Traversal Vulnerability (CVE-2025-57790)
Web Server Common
1012662* - Gitea Diffpatch API Git Hook Remote Code Execution Vulnerability (CVE-2026-60004)
Web Server HTTPS
1012727 - Cisco Catalyst SD-WAN Manager Authentication Bypass Vulnerability (CVE-2026-76504)
1012677* - DELMIA Apriso Deserialization Vulnerability (CVE-2025-5086)
1012724 - WordPress 'Gravity SMTP' Plugin Information Disclosure Vulnerability (CVE-2026-4020)
1012717 - Wordpress 'bookingpress-appointment-booking-pro' Plugin Authentication Bypass Vulnerability (CVE-2026-9830)
1012726 - libevent HTTP Parsing NUL Byte Vulnerability (CVE-2026-63385)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Server Common
1012721 - Atlassian Data Center Products Arbitrary File Access Vulnerability (CVE-2026-21589)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Server Common
1012721 - Atlassian Data Center Products Arbitrary File Access Vulnerability (CVE-2026-21589)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services - Client
1008138* - Microsoft Windows SMB Tree Connect Response Denial Of Service Vulnerability (CVE-2017-0016)
DHCP Server
1012640* - Windows DHCP Server Remote Code Execution Vulnerability (CVE-2026-50518)
Ivanti Endpoint Manager
1012701 - Ivanti Endpoint Manager Absolute Path Traversal Vulnerability (CVE-2024-13160)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
DCERPC Services - Client
1008138* - Microsoft Windows SMB Tree Connect Response Denial Of Service Vulnerability (CVE-2017-0016)
DHCP Server
1012640* - Windows DHCP Server Remote Code Execution Vulnerability (CVE-2026-50518)
Ivanti Endpoint Manager
1012701 - Ivanti Endpoint Manager Absolute Path Traversal Vulnerability (CVE-2024-13160)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Oracle PeopleSoft PIA
1012580* - Oracle PeopleSoft PeopleTools SSRF Vulnerability (CVE-2026-35273)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Oracle PeopleSoft PIA
1012580* - Oracle PeopleSoft PeopleTools SSRF Vulnerability (CVE-2026-35273)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Server Common
1012714 - Wordpress Get_Page_Template Function Remote Code Execution Vulnerability (CVE-2026-87902)
Web Server HTTPS
1012713 - Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2026-45504)
1012697 - WordPress 'Pix for WooCommerce' Plugin Remote Code Execution Vulnerability (CVE-2026-3891)
Web Server SharePoint
1012715 - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2026-65660)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Server Common
1012714 - Wordpress Get_Page_Template Function Remote Code Execution Vulnerability (CVE-2026-87902)
Web Server HTTPS
1012713 - Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2026-45504)
1012697 - WordPress 'Pix for WooCommerce' Plugin Remote Code Execution Vulnerability (CVE-2026-3891)
Web Server SharePoint
1012715 - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2026-65660)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Ivanti Endpoint Manager
1012704 - Ivanti Epm Absolute Path Traversal Vulnerability (CVE-2024-13161)
Langflow
1012702 - Langflow Remote Code Execution Vulnerability (CVE-2026-0770)
Remote Desktop Protocol Server
1012383* - Identified RDS Local Resource Redirection Attempt
1012380* - Identified Suspicious File Transfer From RDP Redirect Drive
Web Application PHP Based
1012711 - JoomlaCK Page Builder CK Arbitrary File Upload Vulnerability (CVE-2026-56290)
Web Server Common
1012705 - OpenPLC ScadaBR Cross-Site Scripting Vulnerability (CVE-2021-26829)
1012703 - Prtg Network Monitor Local File Inclusion Vulnerability (CVE-2018-19410)
Web Server HTTPS
1012708 - Adobe Commerce Server-Side Template Injection Vulnerability (CVE-2022-24086)
1012674 - Yii Framework Remote Code Execution Vulnerability (CVE-2024-58136)
Web Server Rejetto
1012706 - Rejetto Code Injection Vulnerability (CVE-2014-6287)
Integrity Monitoring Rules:
1003019* - Application - Trend Micro Deep Security Agent / Relay
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Ivanti Endpoint Manager
1012704 - Ivanti Epm Absolute Path Traversal Vulnerability (CVE-2024-13161)
Langflow
1012702 - Langflow Remote Code Execution Vulnerability (CVE-2026-0770)
Remote Desktop Protocol Server
1012383* - Identified RDS Local Resource Redirection Attempt
1012380* - Identified Suspicious File Transfer From RDP Redirect Drive
Web Application PHP Based
1012711 - JoomlaCK Page Builder CK Arbitrary File Upload Vulnerability (CVE-2026-56290)
Web Server Common
1012705 - OpenPLC ScadaBR Cross-Site Scripting Vulnerability (CVE-2021-26829)
1012703 - Prtg Network Monitor Local File Inclusion Vulnerability (CVE-2018-19410)
Web Server HTTPS
1012708 - Adobe Commerce Server-Side Template Injection Vulnerability (CVE-2022-24086)
1012674 - Yii Framework Remote Code Execution Vulnerability (CVE-2024-58136)
Web Server Rejetto
1012706 - Rejetto Code Injection Vulnerability (CVE-2014-6287)
Integrity Monitoring Rules:
1003019* - Application - Trend Micro Deep Security Agent / Relay
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Server HTTPS
1012700 - Citrix Session Recording Remote Code Execution Vulnerability (CVE-2024-8069)
1012699 - Fortinet FortiClientEMS SQL Injection Vulnerability (CVE-2026-21643)
1012691 - GitLab CE/EE Path Traversal Vulnerability (CVE-2026-85706)
1012638* - WordPress Cross-Site Scripting Vulnerability (CVE-2026-64638)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Server HTTPS
1012700 - Citrix Session Recording Remote Code Execution Vulnerability (CVE-2024-8069)
1012699 - Fortinet FortiClientEMS SQL Injection Vulnerability (CVE-2026-21643)
1012691 - GitLab CE/EE Path Traversal Vulnerability (CVE-2026-85706)
1012638* - WordPress Cross-Site Scripting Vulnerability (CVE-2026-64638)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.