Owasp-modsecurity Modsecurity

9 CVEs affecting Owasp-modsecurity Modsecurity. Latest disclosed: 2026-07-10. Critical: 0, High: 6.

Top CVEs affecting Owasp-modsecurity Modsecurity
CVESeverityScorePublishedSummary
CVE-2026-52747High8.62026-07-10ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 3.0.16, the multipart/form-data request…
CVE-2026-42268High7.52026-05-12ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandl…
CVE-2026-30923High7.52026-05-05ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Libmodsecurity is one component of the ModSecuri…
CVE-2025-48866High7.52025-06-02ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of ser…
CVE-2025-47947High7.52025-05-21ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerabl…
CVE-2025-27110High7.52025-02-25Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and…
CVE-2025-52891Medium6.52025-07-02ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML…
CVE-2025-54571Medium6.12025-08-06ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can ov…
CVE-2026-52761Medium5.82026-07-10ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 through 3.0.15, the t:utf8toUnicode t…