https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:20:04.512465+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-55759 EUVD-2026-55759 2026-10-04T08:20:04.597942+00:00 EUVD-2026-55759 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13464 fkie_cve-2019-13464 2026-10-04T08:20:04.597980+00:00

An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, because PHP automatically transforms dots into underscores in certain contexts where dots are invalid.

 https://cve.radiocsirt.org/vuln/ghsa-9qm4-xr26-w9h5 GHSA-9qm4-xr26-w9h5 2026-10-04T08:20:04.598014+00:00

An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, because PHP automatically transforms dots into underscores in certain contexts where dots are invalid.

 https://cve.radiocsirt.org/vuln/gsd-2019-13464 gsd-2019-13464 2026-10-04T08:20:04.598032+00:00 gsd-2019-13464 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13464 UBUNTU-CVE-2019-13464 2026-10-04T08:20:04.598045+00:00

Affected: Ubuntu:18.04:LTS: modsecurity-crs, Ubuntu:20.04:LTS: modsecurity, Ubuntu:22.04:LTS: modsecurity, Ubuntu:24.04:LTS: modsecurity, Ubuntu:25.10: modsecurity, Ubuntu:26.04:LTS: modsecurity

An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, because PHP automatically transforms dots into underscores in certain contexts where dots are invalid.