OW
Vendor
owasp-modsecurity
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-52747 | MO ModSecurity owasp-modsecurity | 8.6 | Jul 10 | ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass |
| CVE-2026-52761 | MO ModSecurity owasp-modsecurity | 5.3 | Jul 10 | ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture |
| CVE-2026-42268 | MO ModSecurity owasp-modsecurity | 7.5 | May 12 | ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators |
| CVE-2026-30923 | MO ModSecurity owasp-modsecurity | 7.5 | May 5 | libModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings |