Linux Distros Unpatched Vulnerability : CVE-2026-114460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in modqos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the...

CVE-2026-114460

A flaw was found in modqos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit this...

CVE-2026-114460 Mod_qos: query truncation during json body merging permits security-rule bypass

A flaw was found in modqos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit this...

CVE-2026-114460

A flaw in mod_qos involves an off-by-one pointer calculation error that occurs when merging request body parameters with an existing URL query. This error causes the query string to be truncated during security evaluation while the actual request remains unchanged. An unauthenticated remote attac...

PT-2026-121292

A flaw was found in mod qos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit thi...

PT-2026-107377

Name of the Vulnerable Software and Affected Versions Coraza versions 3.0.0 through 3.8.0 Description Coraza contains a flaw where request arguments are silently discarded once the SecArgumentsLimit default 1000 is reached. Because the engine does not set an error flag or notify rules when this...