Login Request a demo
MO
Product
Modsecurity
by Owasp · last CVE Jul 10, 2026
15
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 11Medium 4Low 0
Severity
All severities15Critical0High11Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Modsecurity to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54571
6.1
0%
Aug 6
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx
Affected: 2.0.0 before 2.9.12
CVE-2018-13065
6.1
1%
Jul 3
ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element
Affected: 3.0.0
CVE-2026-52761
5.3
0%
Jul 10
ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture
Affected: 3.0.0 through 3.0.15
CVE-2019-25043
5.3
1%
May 6
ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error and worker-process crash for a "Cookie: =abc" header
Affected: 3.0.0 before 3.0.4
Showing 4