https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:03:45.813876+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-modsecurity-2025-54571 BIT-modsecurity-2025-54571 — ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure 2026-10-02T19:03:45.825486+00:00

Affected: Bitnami: modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we have demonstrated the potential for XSS and arbitrary script source code disclosure in the latest version of mod_security2. This issue is fixed in version 2.9.12.

 https://cve.radiocsirt.org/vuln/euvd-2026-257569 EUVD-2026-257569 2026-10-02T19:03:45.825549+00:00 EUVD-2026-257569 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54571 fkie_cve-2025-54571 2026-10-02T19:03:45.825566+00:00

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we have demonstrated the potential for XSS and arbitrary script source code disclosure in the latest version of mod_security2. This issue is fixed in version 2.9.12.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0022 NCSC-2026-0022 — Kwetsbaarheden verholpen in Oracle Communications producten 2026-10-02T19:03:45.825591+00:00 NCSC-2026-0022 https://cve.radiocsirt.org/vuln/oesa-2025-2012 OESA-2025-2012 — mod_security security update 2026-10-02T19:03:45.825636+00:00

Affected: openEuler:24.03-LTS: mod_security

Security Fix(es):

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we have demonstrated the potential for XSS and arbitrary script source code disclosure in the latest version of mod_security2. This issue is fixed in version 2.9.12.(CVE-2025-54571)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15456-1 openSUSE-SU-2025:15456-1 — apache2-mod_security2-2.9.12-1.1 on GA media 2026-10-02T19:03:45.825661+00:00

apache2-mod_security2-2.9.12-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:03423-1 SUSE-SU-2025:03423-1 — Security update for apache2-mod_security2 2026-10-02T19:03:45.825676+00:00

Security update for apache2-mod_security2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-54571 UBUNTU-CVE-2025-54571 2026-10-02T19:03:45.825690+00:00

Affected: Ubuntu:20.04:LTS: modsecurity, Ubuntu:22.04:LTS: modsecurity, Ubuntu:24.04:LTS: modsecurity, Ubuntu:25.10: modsecurity, Ubuntu:26.04:LTS: modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we have demonstrated the potential for XSS and arbitrary script source code disclosure in the latest version of mod_security2. This issue is fixed in version 2.9.12.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1721 WID-SEC-W-2025-1721 — OWASP ModSecurity: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-02T19:03:45.825715+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OWASP ModSecurity ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.