CVE-2026-103932

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. From 3.0.5 until 3.0.17, the PCRE2 implementation of @rxGlobal in src/utils/regex.cc converts pcre2match match-limit errors into an ordinary no-match result instead of propagating a non-OK...