https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:49:17.678297+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-modsecurity-2026-52761 BIT-modsecurity-2026-52761 — ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture 2026-10-04T18:49:17.738533+00:00

Affected: Bitnami: modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 through 3.0.15, the t:utf8toUnicode transformation in src/actions/transformations/utf8_to_unicode.cc produces wrong output on i386 architecture because snprintf uses sizeof on a char pointer rather than the length of the unicode buffer, allowing rules that use this transformation to be bypassed on i386 architecture. This issue is fixed in version 3.0.16.

 https://cve.radiocsirt.org/vuln/euvd-2026-335872 EUVD-2026-335872 2026-10-04T18:49:17.738588+00:00 EUVD-2026-335872 https://cve.radiocsirt.org/vuln/fkie_cve-2026-52761 fkie_cve-2026-52761 2026-10-04T18:49:17.738604+00:00

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 through 3.0.15, the t:utf8toUnicode transformation in src/actions/transformations/utf8_to_unicode.cc produces wrong output on i386 architecture because snprintf uses sizeof on a char pointer rather than the length of the unicode buffer, allowing rules that use this transformation to be bypassed on i386 architecture. This issue is fixed in version 3.0.16.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-52761 UBUNTU-CVE-2026-52761 2026-10-04T18:49:17.738628+00:00

Affected: Ubuntu:20.04:LTS: modsecurity, Ubuntu:22.04:LTS: modsecurity, Ubuntu:24.04:LTS: modsecurity, Ubuntu:26.04:LTS: modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 through 3.0.15, the t:utf8toUnicode transformation in src/actions/transformations/utf8_to_unicode.cc produces wrong output on i386 architecture because snprintf uses sizeof on a char pointer rather than the length of the unicode buffer, allowing rules that use this transformation to be bypassed on i386 architecture. This issue is fixed in version 3.0.16.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2138 WID-SEC-W-2026-2138 — OWASP ModSecurity: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-10-04T18:49:17.738653+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OWASP ModSecurity ausnutzen, um Sicherheitsvorkehrungen zu umgehen.