Do Son Discover the latest ModSecurity security vulnerabilities, including WAF evasion and pointer dereferences. Patch these OWASP WAF engine flaws today.
modsecurity
Two ModSecurity vulnerabilities let attackers slip past WAF rules via a multipart parser bug (CVE-2026-52747). Update to ModSecurity v3.0.16 now.
libmodsecurity3 faces critical 8.2 & 7.5 CVSS flaws. A simple one-line script can crash WAF worker processes. Protect your server by upgrading to v3.0.15 now.
Critical OWASP CRS flaw CVE-2026-21876 (CVSS 9.3) allows XSS bypass via UTF-7 encoding. ModSecurity & Coraza users: update to v4.22.0 immediately.
A new DoS vulnerability (CVE-2025-48866) found in ModSecurity WAF can crash your web application. Update to 2.9.10 immediately!
A high-severity flaw (CVE-2025-47947) in ModSecurity's Apache module allows DoS via JSON. PoC exists, no workaround, and a patch is expected soon.
Understand the implications of CVE-2025-27110 on web application security and how it may allow attacks to bypass defenses.
Recently, a significant vulnerability in ModSecurity versions 3.0.0 to 3.0.11, identified as CVE-2024-1019, has surfaced.
There are so many ways to protect Web-server. On this post, I’m going to guide how to use ModSecurity WAF to...