https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:37:27.391567+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-modsecurity-2026-30923 BIT-modsecurity-2026-30923 — libModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings 2026-10-03T10:37:27.396020+00:00

Affected: Bitnami: modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Libmodsecurity is one component of the ModSecurity v3 project. A segmentation fault occurs when a rule using the t:hexDecode transformation inspects a query string parameter containing a single character. An attacker can exploit this to crash worker processes, causing a denial of service. Service resumes once the attack stops as worker processes recover from the segfault. All versions before 3.0.15 of libModSecurity3 are affected. This has been patched in version 3.0.15.

 https://cve.radiocsirt.org/vuln/euvd-2026-308627 EUVD-2026-308627 2026-10-03T10:37:27.396069+00:00 EUVD-2026-308627 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30923 fkie_cve-2026-30923 2026-10-03T10:37:27.396086+00:00

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Libmodsecurity is one component of the ModSecurity v3 project. A segmentation fault occurs when a rule using the t:hexDecode transformation inspects a query string parameter containing a single character. An attacker can exploit this to crash worker processes, causing a denial of service. Service resumes once the attack stops as worker processes recover from the segfault. All versions before 3.0.15 of libModSecurity3 are affected. This has been patched in version 3.0.15.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10732-1 openSUSE-SU-2026:10732-1 — libmodsecurity3-3.0.15-1.1 on GA media 2026-10-03T10:37:27.396112+00:00

libmodsecurity3-3.0.15-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-30923 UBUNTU-CVE-2026-30923 2026-10-03T10:37:27.396130+00:00

Affected: Ubuntu:20.04:LTS: modsecurity, Ubuntu:22.04:LTS: modsecurity, Ubuntu:24.04:LTS: modsecurity, Ubuntu:25.10: modsecurity, Ubuntu:26.04:LTS: modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Libmodsecurity is one component of the ModSecurity v3 project. A segmentation fault occurs when a rule using the t:hexDecode transformation inspects a query string parameter containing a single character. An attacker can exploit this to crash worker processes, causing a denial of service. Service resumes once the attack stops as worker processes recover from the segfault. All versions before 3.0.15 of libModSecurity3 are affected. This has been patched in version 3.0.15.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1308 WID-SEC-W-2026-1308 — OWASP ModSecurity: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T10:37:27.396157+00:00

Ein Angreifer kann mehrere Schwachstellen in OWASP ModSecurity ausnutzen, um einen Denial of Service Angriff durchzuführen.