Product by Owasp-modsecurity
Modsecurity
10 known vulnerabilities in Modsecurity (Owasp-modsecurity), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-52747 | Owasp-modsecurity ModSecurity: Incorrect Behavior Order: Validate Before Canonicalize | 8.6 | |
| High | CVE-2025-48866 | ModSecurity has possible DoS vulnerability in sanitiseArg action | 7.5 | |
| High | CVE-2024-1019 | WAF bypass of the ModSecurity v3 release line | 8.6 | |
| High | CVE-2026-30923 | Owasp-modsecurity ModSecurity: Out-of-bounds Read | 7.5 | |
| High | CVE-2026-42268 | ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators | 7.5 | |
| High | CVE-2025-47947 | ModSecurity Has Possible DoS Vulnerability | 7.5 | |
| High | CVE-2025-27110 | Libmodsecurity3 has possible bypass of encoded HTML entities | 7.5 | |
| Medium | CVE-2026-52761 | ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture | 5.3 | |
| Medium | CVE-2025-52891 | ModSecurity empty XML tag causes segmentation fault | 6.5 | |
| Medium | CVE-2025-54571 | ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure | 6.1 |