https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:27:38.046131+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04426 bdu:2024-04426 2026-10-02T15:27:38.353914+00:00 bdu:2024-04426 https://cve.radiocsirt.org/vuln/bit-modsecurity-2022-48279 BIT-modsecurity-2022-48279 2026-10-02T15:27:38.353957+00:00

Affected: Bitnami: modsecurity

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.

 https://cve.radiocsirt.org/vuln/euvd-2026-226974 EUVD-2026-226974 2026-10-02T15:27:38.353992+00:00 EUVD-2026-226974 https://cve.radiocsirt.org/vuln/fkie_cve-2022-48279 fkie_cve-2022-48279 2026-10-02T15:27:38.354005+00:00

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.

 https://cve.radiocsirt.org/vuln/ghsa-6fhx-fm6h-hpxq GHSA-6fhx-fm6h-hpxq 2026-10-02T15:27:38.354027+00:00

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.

 https://cve.radiocsirt.org/vuln/gsd-2022-48279 gsd-2022-48279 2026-10-02T15:27:38.354042+00:00 gsd-2022-48279 https://cve.radiocsirt.org/vuln/oesa-2024-1334 OESA-2024-1334 — mod_security security update 2026-10-02T15:27:38.354052+00:00

Affected: openEuler:22.03-LTS-SP3: mod_security

This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information. Security Fix(es): In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14703-1 openSUSE-SU-2025:14703-1 — apache2-mod_security2-2.9.8-2.1 on GA media 2026-10-02T15:27:38.354075+00:00

apache2-mod_security2-2.9.8-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:4629 RHSA-2023:4629 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update 2026-10-02T15:27:38.354093+00:00

apr: integer overflow/wraparound in apr_encode httpd: mod_proxy_ajp: Possible request smuggling httpd: mod_proxy: HTTP response splitting mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass httpd: mod_proxy_uwsgi HTTP response splitting curl: use after free in SSH sha256 fingerprint check curl: IDN wildcard match may lead to Improper Cerificate Validation curl: more POST-after-PUT confusion

 https://cve.radiocsirt.org/vuln/suse-su-2023:0317-1 SUSE-SU-2023:0317-1 — Security update for apache2-mod_security2 2026-10-02T15:27:38.354124+00:00

Security update for apache2-mod_security2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-48279 UBUNTU-CVE-2022-48279 2026-10-02T15:27:38.354139+00:00

Affected: Ubuntu:Pro:14.04:LTS: modsecurity-apache, Ubuntu:Pro:16.04:LTS: modsecurity-apache, Ubuntu:Pro:18.04:LTS: modsecurity-apache, Ubuntu:20.04:LTS: modsecurity-apache, Ubuntu:20.04:LTS: modsecurity, Ubuntu:22.04:LTS: modsecurity, Ubuntu:Pro:22.04:LTS: modsecurity-apache

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0188 WID-SEC-W-2023-0188 — Trustwave ModSecurity: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-10-02T15:27:38.354166+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Trustwave ModSecurity ausnutzen, um Sicherheitsvorkehrungen zu umgehen.