https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:51:14.951324+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06497 bdu:2025-06497 2026-10-02T15:51:14.960729+00:00 bdu:2025-06497 https://cve.radiocsirt.org/vuln/bit-modsecurity-2025-48866 BIT-modsecurity-2025-48866 — ModSecurity has possible DoS vulnerability in sanitiseArg action 2026-10-02T15:51:14.960760+00:00

Affected: Bitnami: modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.

 https://cve.radiocsirt.org/vuln/euvd-2026-243444 EUVD-2026-243444 2026-10-02T15:51:14.960794+00:00 EUVD-2026-243444 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48866 fkie_cve-2025-48866 2026-10-02T15:51:14.960807+00:00

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.

 https://cve.radiocsirt.org/vuln/oesa-2025-1676 OESA-2025-1676 — mod_security security update 2026-10-02T15:51:14.960830+00:00

Affected: openEuler:24.03-LTS-SP1: mod_security, openEuler:20.03-LTS-SP4: mod_security, openEuler:22.03-LTS-SP3: mod_security, openEuler:22.03-LTS-SP4: mod_security, openEuler:24.03-LTS: mod_security

Security Fix(es):

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.(CVE-2025-48866)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15197-1 openSUSE-SU-2025:15197-1 — apache2-mod_security2-2.9.10-1.1 on GA media 2026-10-02T15:51:14.960859+00:00

apache2-mod_security2-2.9.10-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:13670 RHSA-2025:13670 — Red Hat Security Advisory: mod_security security update 2026-10-02T15:51:14.960875+00:00

mod_security: ModSecurity Denial of Service Vulnerability

 https://cve.radiocsirt.org/vuln/suse-su-2025:02029-1 SUSE-SU-2025:02029-1 — Security update for apache2-mod_security2 2026-10-02T15:51:14.960889+00:00

Security update for apache2-mod_security2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-48866 UBUNTU-CVE-2025-48866 2026-10-02T15:51:14.960902+00:00

Affected: Ubuntu:Pro:14.04:LTS: modsecurity-apache, Ubuntu:Pro:16.04:LTS: modsecurity-apache, Ubuntu:Pro:18.04:LTS: modsecurity-apache, Ubuntu:Pro:20.04:LTS: modsecurity-apache, Ubuntu:Pro:22.04:LTS: modsecurity-apache, Ubuntu:Pro:24.04:LTS: modsecurity-apache, Ubuntu:25.10: modsecurity-apache

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1215 WID-SEC-W-2025-1215 — OWASP ModSecurity: Schwachstelle ermöglicht Denial of Service 2026-10-02T15:51:14.960929+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OWASP ModSecurity ausnutzen, um einen Denial of Service Angriff durchzuführen.