MO
Product
ModSecurity
4
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add ModSecurity to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-52747 | 8.6 | Jul 10 | ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass Affected: < 3.0.16 |
| CVE-2026-42268 | 7.5 | May 12 | ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators Affected: >= 3.0.0, < 3.0.15 |
| CVE-2026-30923 | 7.5 | May 5 | libModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings Affected: < 3.0.15 |
| CVE-2026-52761 | 5.3 | Jul 10 | ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture Affected: >= 3.0.0, < 3.0.16 |
Showing 4