OW
Vendor
owasp-modsecurity
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-52747 | MO ModSecurity owasp-modsecurity | 8.6 | Jul 10 | ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass |
| CVE-2026-52761 | MO ModSecurity owasp-modsecurity | 5.3 | Jul 10 | ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture |
| CVE-2026-42268 | MO ModSecurity owasp-modsecurity | 7.5 | May 12 | ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators |
| CVE-2026-30923 | MO ModSecurity owasp-modsecurity | 7.5 | May 5 | libModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings |
| CVE-2025-54571 | MO ModSecurity owasp-modsecurity | 6.1 | Aug 5 | ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure |
| CVE-2025-52891 | MO ModSecurity owasp-modsecurity | 6.5 | Jul 2 | ModSecurity empty XML tag causes segmentation fault |
| CVE-2025-48866 | MO ModSecurity owasp-modsecurity | 7.5 | Jun 2 | ModSecurity has possible DoS vulnerability in sanitiseArg action |
| CVE-2025-47947 | MO ModSecurity owasp-modsecurity | 7.5 | May 21 | ModSecurity Has Possible DoS Vulnerability |
| CVE-2025-27110 | MO ModSecurity owasp-modsecurity | 7.5 | Feb 25 | Libmodsecurity3 has possible bypass of encoded HTML entities |
| CVE-2024-1019 | MO ModSecurity OWASP ModSecurity | 8.6 | Jan 30 | WAF bypass of the ModSecurity v3 release line |