WS-2026-0087

In OWASP ModSecurity, t:base64DecodeExt discards the entire decoded value while reporting success when the input contains a malformed single-character X== padding group anywhere in the string, letting attackers bypass rules that match on the decoded content. The advisory lists 2.9.15 and 3.0.17 a...

SOL15882 - TLS1.x padding vulnerability CVE-2014-8730

2 If you are planning to upgrade to BIG-IP APM 11.4.1 HF6 or 11.5.1 HF6 to mitigate this issue, you should instead upgrade to 11.4.1 HF7 or 11.5.1 HF7 to avoid an issue specific to BIG-IP APM. For more information, refer to SOL15914: The TMM process may restart and produce a core file after...