Deep Security Center
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Server Common
1012766* - PHP Application Out-of-Memory Vulnerability
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
1012754* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 2
1012765* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 3
Web Server HTTPS
1012774 - WordPress Core Remote Code Execution Vulnerability (CVE-2026-119977)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Server Common
1012766* - PHP Application Out-of-Memory Vulnerability
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
1012754* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 2
1012765* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 3
Web Server HTTPS
1012774 - WordPress Core Remote Code Execution Vulnerability (CVE-2026-119977)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Server HTTPS
1012761* - Google and Node.js Brotli Decoder Buffer Overflow Vulnerability (CVE-2026-111497)
1012773 - Google and Node.js Brotli Decoder Buffer Overflow Vulnerability (CVE-2026-111497) - 2
1012765 - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 3
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Server HTTPS
1012761* - Google and Node.js Brotli Decoder Buffer Overflow Vulnerability (CVE-2026-111497)
1012773 - Google and Node.js Brotli Decoder Buffer Overflow Vulnerability (CVE-2026-111497) - 2
1012765 - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 3
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Progress WhatsUp Gold
1012767 - Progress WhatsUp Gold SQL Injection Vulnerability (CVE-2024-6670)
Web Server Apache
1012763 - Craft CMS PHP Code Injection Vulnerability (CVE-2025-35939)
Web Server Common
1012764 - Pillow ImagingJpegDecode Heap Buffer Overflow Vulnerability (CVE-2026-112403)
Web Server HTTPS
1012762 - GitLab Remote Code Execution Vulnerability (CVE-2026-110264)
1012761* - Google and Node.js Brotli Decoder Buffer Overflow Vulnerability (CVE-2026-111497)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Progress WhatsUp Gold
1012767 - Progress WhatsUp Gold SQL Injection Vulnerability (CVE-2024-6670)
Web Server Apache
1012763 - Craft CMS PHP Code Injection Vulnerability (CVE-2025-35939)
Web Server Common
1012764 - Pillow ImagingJpegDecode Heap Buffer Overflow Vulnerability (CVE-2026-112403)
Web Server HTTPS
1012762 - GitLab Remote Code Execution Vulnerability (CVE-2026-110264)
1012761* - Google and Node.js Brotli Decoder Buffer Overflow Vulnerability (CVE-2026-111497)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
DNS Server
1012756 - Samba DNS Name Compression Denial Of Service Vulnerability (CVE-2020-10745)
Directory Server LDAP
1012753 - Red Hat FreeIPA Anonymous LDAP ADD Authentication Bypass Vulnerability (CVE-2026-76578)
SAP NetWeaver Visual Composer
1012760 - SAP NetWeaver Visual Composer Deserialization Vulnerability (CVE-2025-42999)
Web Application Common
1012752 - Mozilla PDF.js Arbitrary JavaScript Code Execution Vulnerability (CVE-2024-4367)
Web Application Ruby Based
1012755 - Zammad Remote Code Execution Vulnerability (CVE-2026-102489)
Web Application Tomcat
1012757 - Apache Tomcat Number Guess Example Cross-Site Scripting Vulnerability (CVE-2026-50229)
Web Server HTTPS
1012761 - Google and Node.js Brotli Decoder Buffer Overflow Vulnerability (CVE-2026-111497)
1012766 - PHP Application Out-of-Memory Vulnerability
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
DNS Server
1012756 - Samba DNS Name Compression Denial Of Service Vulnerability (CVE-2020-10745)
Directory Server LDAP
1012753 - Red Hat FreeIPA Anonymous LDAP ADD Authentication Bypass Vulnerability (CVE-2026-76578)
SAP NetWeaver Visual Composer
1012760 - SAP NetWeaver Visual Composer Deserialization Vulnerability (CVE-2025-42999)
Web Application Common
1012752 - Mozilla PDF.js Arbitrary JavaScript Code Execution Vulnerability (CVE-2024-4367)
Web Application Ruby Based
1012755 - Zammad Remote Code Execution Vulnerability (CVE-2026-102489)
Web Application Tomcat
1012757 - Apache Tomcat Number Guess Example Cross-Site Scripting Vulnerability (CVE-2026-50229)
Web Server HTTPS
1012761 - Google and Node.js Brotli Decoder Buffer Overflow Vulnerability (CVE-2026-111497)
1012766 - PHP Application Out-of-Memory Vulnerability
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Server HTTPS
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Server HTTPS
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Server HTTPS
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Server HTTPS
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
There are no new or updated Deep Packet Inspection Rules in this Security Update.
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
There are no new or updated Deep Packet Inspection Rules in this Security Update.
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Client Common
1012750 - OpenSSL CMS AuthEnvelopedData Stack Buffer Overflow Vulnerability (CVE-2025-15467)
Web Server HTTPS
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
1012754* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 2
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Client Common
1012750 - OpenSSL CMS AuthEnvelopedData Stack Buffer Overflow Vulnerability (CVE-2025-15467)
Web Server HTTPS
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
1012754* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 2
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Server HTTPS
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
1012754* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 2
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Web Server HTTPS
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
1012754* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 2
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
NetBIOS Name Service
1012732 - Samba WINS Hook OS Command Injection Vulnerability (CVE-2025-10230)
Unix CUPS Client
1012160* - CUPS Command Injection Vulnerability (CVE-2024-47176, CVE-2024-47175)
Web Application PHP Based
1012744 - Drupal Core Remote Code Execution Vulnerability (CVE-2020-13671)
Web Client Common
1012741 - RARLAB WinRAR Directory Traversal Vulnerability (CVE-2025-6218)
Web Server HTTPS
1012746 - Ahsay AhsayCBS OS Command Injection Vulnerability (CVE-2026-105134)
1012716 - IBM Langflow OSS Code Injection Vulnerability (CVE-2026-9198)
1012748 - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2026-63514)
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
1012754 - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 2
1012723 - SAP Commerce Cloud Code Injection Vulnerability (CVE-2026-58231)
1012738 - Sitecore Multiple Products TemplateParser Code Execution Vulnerability (CVE-2023-35813)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
NetBIOS Name Service
1012732 - Samba WINS Hook OS Command Injection Vulnerability (CVE-2025-10230)
Unix CUPS Client
1012160* - CUPS Command Injection Vulnerability (CVE-2024-47176, CVE-2024-47175)
Web Application PHP Based
1012744 - Drupal Core Remote Code Execution Vulnerability (CVE-2020-13671)
Web Client Common
1012741 - RARLAB WinRAR Directory Traversal Vulnerability (CVE-2025-6218)
Web Server HTTPS
1012746 - Ahsay AhsayCBS OS Command Injection Vulnerability (CVE-2026-105134)
1012716 - IBM Langflow OSS Code Injection Vulnerability (CVE-2026-9198)
1012748 - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2026-63514)
1012749* - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619)
1012754 - PHP Application Remote Code Execution Vulnerability (CVE-2026-109618 and CVE-2026-109619) - 2
1012723 - SAP Commerce Cloud Code Injection Vulnerability (CVE-2026-58231)
1012738 - Sitecore Multiple Products TemplateParser Code Execution Vulnerability (CVE-2023-35813)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.