thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Virtual Patching

Blocking exploitation of a known vulnerability with an external control such as a WAF or IPS rule while the code fix is pending.

Definition

Virtual patches do not change the vulnerable code; they filter malicious input patterns at the network or application layer. They buy time but can be bypassed by variant payloads, so the real fix is still required.

Example

An IPS signature blocks requests matching a deserialization exploit until the framework is upgraded.

Exam tip

Virtual patching is temporary; the correct long-term answer is fixing the code.

Related terms