# Ruleset Update Summary - 2026/09/25 - v11298 **URL:** \ **Category:** Ruleset Updates\ **Created:** [September 25, 2026, 8:04pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-09-25-v11298/3464 "2026-09-25T20:04:37Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [September 25, 2026, 8:04pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-09-25-v11298/3464/1 "2026-09-25T20:04:37Z")
## Summary: 6 new OPEN, 7 new PRO (6 + 1) * * * ## Added rules: ### Open: - 2072259 - ET WEB\_SPECIFIC\_APPS IBM Langflow OSS Authenticated Remote Code Execution (CVE-2026-17633) (web\_specific\_apps.rules) - 2072260 - ET WEB\_SPECIFIC\_APPS WordPress Core PHP Template Path Traversal (CVE-2026-87902) (web\_specific\_apps.rules) - 2072261 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (px-img .leewhitman-raymond .com) (malware.rules) - 2072262 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (px-img .leewhitman-raymond .com) (malware.rules) - 2072263 - ET INFO DYNAMIC\_DNS Query to a \*.shanetrainfitness .com domain (info.rules) - 2072264 - ET INFO DYNAMIC\_DNS HTTP Request to a \*.shanetrainfitness .com domain (info.rules) ### Pro: - 2868708 - ETPRO EXPLOIT Apache MINA Type-0 Allowlist Bypass Remote Code Execution (CVE-2026-42779) (exploit.rules)