CVE-2026-104259

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Prior to 2.9.15 and 3.0.17, msrefnremoveCommentsexecute in apache2/retfns.c and inplace in src/actions/transformations/removecomments.cc implement t:removeComments by copying the character...