Ruleset Update Summary - 2026/11/05 - v11328

Ruleset Updates
1

Summary:

0 new OPEN, 10 new PRO (0 + 10)

Added rules:

Pro:

  • 2869035 - ETPRO MALWARE TryNodeRAT CnC Command Inbound, Stop VNC (malware.rules)
  • 2869036 - ETPRO EXPLOIT Quest KACE System Maintenance Appliance Unauthenticated SQL Injection (CVE-2018-11136) (exploit.rules)
  • 2869037 - ETPRO EXPLOIT Quest KACE System Maintenance Appliance SQL Injection (CVE-2018-11140) (exploit.rules)
  • 2869038 - ETPRO EXPLOIT Quest KACE System Maintenance Appliance Unauthenticated Cross Site Scripting (CVE-2018-11133) (exploit.rules)
  • 2869039 - ETPRO EXPLOIT Quest KACE System Maintenance Appliance Path Traversal (CVE-2018-11137) (exploit.rules)
  • 2869041 - ETPRO EXPLOIT Quest KACE System Maintenance Appliance Path Traversal (CVE-2018-11141) (exploit.rules)
  • 2869043 - ETPRO EXPLOIT Roundcube Webmail _im_convert_path Command Injection (CVE-2020-12641) (exploit.rules)
  • 2869044 - ETPRO EXPLOIT Adobe Commerce & Magento PolyShell Unrestricted File Upload (CVE-2026-48356) (exploit.rules)
  • 2869045 - ETPRO EXPLOIT Collabora Built-in CODE Server OS Command Injection (CVE-2026-110447) M1 (exploit.rules)
  • 2869046 - ETPRO EXPLOIT Collabora Built-in CODE Server OS Command Injection (CVE-2026-110447) M2 (exploit.rules)

Disabled and modified rules:

  • 2868973 - ETPRO HUNTING TryNodeRAT CnC Fetch Node Resources (hunting.rules)