CVE-2026-104269

A flaw was found in ModSecurity. The multipart parser fails to properly prioritize parameter handling when processing filenames in Content-Disposition headers. A remote attacker can exploit this discrepancy by submitting a request containing both a benign filename and an encoded alternative that...