Ruleset Update Summary - 2026/09/25 - v11298

Ruleset Updates
1

Summary:

6 new OPEN, 7 new PRO (6 + 1)

Added rules:

Open:

  • 2072259 - ET WEB_SPECIFIC_APPS IBM Langflow OSS Authenticated Remote Code Execution (CVE-2026-17633) (web_specific_apps.rules)
  • 2072260 - ET WEB_SPECIFIC_APPS WordPress Core PHP Template Path Traversal (CVE-2026-87902) (web_specific_apps.rules)
  • 2072261 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (px-img .leewhitman-raymond .com) (malware.rules)
  • 2072262 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (px-img .leewhitman-raymond .com) (malware.rules)
  • 2072263 - ET INFO DYNAMIC_DNS Query to a *.shanetrainfitness .com domain (info.rules)
  • 2072264 - ET INFO DYNAMIC_DNS HTTP Request to a *.shanetrainfitness .com domain (info.rules)

Pro:

  • 2868708 - ETPRO EXPLOIT Apache MINA Type-0 Allowlist Bypass Remote Code Execution (CVE-2026-42779) (exploit.rules)