Ruleset Update Summary - 2026/09/29 - v11300

Ruleset Updates
1

Summary:

10 new OPEN, 11 new PRO (10 + 1)

Added rules:

Open:

  • 2072291 - ET WEB_SERVER Citrix Netscaler Unauthenticated Command Injection via HTTP Header (CVE-2026-88771) M1 (web_server.rules)
  • 2072292 - ET WEB_SERVER Citrix Netscaler Unauthenticated Command Injection via HTTP Header (CVE-2026-88771) M2 (web_server.rules)
  • 2072293 - ET WEB_SERVER Citrix Netscaler Unauthenticated Command Injection via HTTP Body (CVE-2026-88771) M1 (web_server.rules)
  • 2072294 - ET WEB_SERVER Citrix Netscaler Unauthenticated Command Injection via HTTP Body (CVE-2026-88771) M2 (web_server.rules)
  • 2072295 - ET MALWARE Generic PowerShell Loader Inbound (malware.rules)
  • 2072296 - ET MALWARE ReverseLoader Base64 Encoded Executable Inbound M3 (malware.rules)
  • 2072297 - ET MALWARE ReverseLoader Base64 Encoded Executable Inbound M2 (malware.rules)
  • 2072298 - ET MALWARE ReverseLoader Base64 Encoded Executable Inbound M1 (malware.rules)
  • 2072299 - ET MALWARE ReverseLoader Base64 Encoded Executable Inbound M4 (malware.rules)
  • 2072300 - ET MALWARE ReverseLoader Base64 Encoded Executable Inbound M5 (malware.rules)

Pro:

  • 2868718 - ETPRO PHISHING TA452 Fake Google Login Page (phishing.rules)