Amazon Linux 2023 : mod_security, mod_security-mlogc (ALAS2023-2026-3247)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3247 advisory. GHSA-5pww-8rfg-9crf: RFC 2231 filename parameter bypasses multipart filename rules CVE-2026-104269 Tenable has extracted the preceding description block directly from the tested product security...

Important: mod_security

Issue Overview: GHSA-5pww-8rfg-9crf: RFC 2231 filename parameter bypasses multipart filename rules CVE-2026-104269 Affected Packages: modsecurity Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras...

Important: mod_security

Issue Overview: GHSA-5pww-8rfg-9crf: RFC 2231 filename parameter bypasses multipart filename rules CVE-2026-104269 Affected Packages: modsecurity Issue Correction: Run dnf update modsecurity --releasever 2023.12.20261026 or dnf update --advisory ALAS2023-2026-3247 --releasever 2023.12.20261026 to...

Amazon Linux 2 : mod_security (ALAS-2026-4010)

The version of modsecurity installed on the remote host is prior to 2.9.15-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4010 advisory. GHSA-5pww-8rfg-9crf: RFC 2231 filename parameter bypasses multipart filename rules CVE-2026-104269 Tenable has extracted the...

[SECURITY] Fedora 45 Update: mod_security-2.9.14-2.fc45

ModSecurity is an open source intrusion detection and prevention engine for web applications. It operates embedded into the web server, acting as a powerful umbrella - shielding web applications from attacks...

Rocky Linux 8 [CIQ] Security Update: mod_security / mod_security-debuginfo / mod_security-debugsource / etc (crlsa-2025_8844)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258844 advisory. modsecurity: ModSecurity Has Possible DoS Vulnerability CVE-2025-47947 Tenable has extracted the preceding description block directly from the CIQ security advisory...

AlmaLinux 9.2 [TuxCare] Security Update: mod_security / mod_security-mlogc (ALMALINUX9.2:CLSA-2025:1762421346)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762421346 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9 [CIQ] Security Update: mod_security / mod_security-debuginfo / mod_security-debugsource / etc (crlsa-2025_12838)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202512838 advisory. modsecurity: ModSecurity Denial of Service Vulnerability CVE-2025-48866 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9.6 [CIQ] Security Update: mod_security / mod_security-mlogc Multiple Vulnerabilities (ciqsa-2026_1407)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261407 advisory. This advisory aggregates security fixes for the modsecurity SRPM in CIQ LTS 9.6. It addresses 6 CVEs: CVE-2025-48866, CVE-2025-47947, CVE-2025-54571,...

Rocky Linux 9 [CIQ] Security Update: mod_security / mod_security-debuginfo / mod_security-debugsource / etc (crlsa-2025_8837)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258837 advisory. modsecurity: ModSecurity Has Possible DoS Vulnerability CVE-2025-47947 Tenable has extracted the preceding description block directly from the CIQ security advisory...

OESA-2026-1573 mod_security_crs security update

The base rules are provided for modsecurity by this package. Security Fixes: The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart...

MiracleLinux 9 : mod_security-2.9.6-2.el9_6 (AXSA:2025-10535:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10535:02 advisory. modsecurity: ModSecurity Has Possible DoS Vulnerability CVE-2025-47947 Tenable has extracted the preceding description block directly from the MiracleLinux...

CVE-2022-48279 affecting package mod_security for versions less than 2.9.7-8

CVE-2022-48279 affecting package modsecurity for versions less than 2.9.7-8. An upgraded version of the package is available that resolves this issue...

EUVD-2003-1161

Malware in sbrugna...

Security update for apache2-mod_security2

This update for apache2-modsecurity2 fixes the following issues: CVE-2025-54571: Fixed insufficient return value handling on modsecurity leads to xss and source code disclosure bsc1247674 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Medium: mod_security

Issue Overview: ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response's Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we...

RHSA-2025:12838 Red Hat Security Advisory: mod_security security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: mod_security security update

An update for modsecurity is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

RockyLinux 8 : mod_security (RLSA-2025:8844)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:8844 advisory. modsecurity: ModSecurity Has Possible DoS Vulnerability CVE-2025-47947 Tenable has extracted the preceding description block directly from the RockyLinux security...

mod_security security update

An update is available for modsecurity. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list ModSecurity is an open source intrusion detection and prevention engine f...