Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

ModSecurity — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in ModSecurity, with AI-generated Chinese analysis, references, and POCs.

Vendor: OWASP ModSecurity

CVE ID Title CVSS Severity Published
CVE-2026-104269 ModSecurity: RFC 2231 `filename*` Parameter Bypasses Multipart Filename Rules on RFC-Compliant Backends (Go, Python, Node, Java) CWE-436 8.6 High 2026-11-05
CVE-2026-73856 ModSecurity: Response Body Inspection Bypass CWE-178 8.6 High 2026-11-05
CVE-2026-61813 ModSecurity: Incorrect libcurl TLS hostname verification setting in HttpsClient::download CWE-295 3.7 Low 2026-11-05
CVE-2026-103932 ModSecurity: PCRE2 `@rxGlobal` match-limit errors are converted to no-match CWE-253 5.8 Medium 2026-11-05
CVE-2026-52747 ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass CWE-180 8.6 High 2026-07-10
CVE-2026-52761 ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture CWE-467 5.8 Medium 2026-07-10
CVE-2026-42268 ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators CWE-191 - - 2026-05-12
CVE-2026-30923 libModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings CWE-125 7.5 - 2026-05-05
CVE-2025-54571 ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure CWE-252 6.1AI Medium AI 2025-08-05
CVE-2025-52891 ModSecurity empty XML tag causes segmentation fault CWE-20 6.5 Medium 2025-07-02
CVE-2025-48866 ModSecurity has possible DoS vulnerability in sanitiseArg action CWE-1050 7.5 High 2025-06-02
CVE-2025-47947 ModSecurity Has Possible DoS Vulnerability CWE-1050 7.5 High 2025-05-21
CVE-2025-27110 Libmodsecurity3 has possible bypass of encoded HTML entities CWE-172 5.3 - 2025-02-25
CVE-2024-1019 WAF bypass of the ModSecurity v3 release line CWE-20 8.6 High 2024-01-30

All 14 known CVE vulnerabilities affecting ModSecurity with full Chinese analysis, references, and POCs where available.