https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:51:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06497 bdu:2025-06497 https://cve.radiocsirt.org/vuln/bdu:2025-06497 https://cve.radiocsirt.org/vuln/bit-modsecurity-2025-48866 <p><strong>Affected:</strong> Bitnami: modsecurity</p> <p>ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.</p> <p><strong>Affected:</strong> Bitnami: modsecurity</p> <p>ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.</p> https://cve.radiocsirt.org/vuln/bit-modsecurity-2025-48866 https://cve.radiocsirt.org/vuln/euvd-2026-243444 EUVD-2026-243444 https://cve.radiocsirt.org/vuln/euvd-2026-243444 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48866 <p>ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.</p> <p>ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-48866 https://cve.radiocsirt.org/vuln/oesa-2025-1676 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: mod_security, openEuler:20.03-LTS-SP4: mod_security, openEuler:22.03-LTS-SP3: mod_security, openEuler:22.03-LTS-SP4: mod_security, openEuler:24.03-LTS: mod_security</p> <p>Security Fix(es):</p> <p>ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.(CVE-2025-48866)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: mod_security, openEuler:20.03-LTS-SP4: mod_security, openEuler:22.03-LTS-SP3: mod_security, openEuler:22.03-LTS-SP4: mod_security, openEuler:24.03-LTS: mod_security</p> <p>Security Fix(es):</p> <p>ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.(CVE-2025-48866)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1676 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15197-1 <p>apache2-mod_security2-2.9.10-1.1 on GA media</p> <p>apache2-mod_security2-2.9.10-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15197-1 https://cve.radiocsirt.org/vuln/rhsa-2025:13670 <p>mod_security: ModSecurity Denial of Service Vulnerability</p> <p>mod_security: ModSecurity Denial of Service Vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2025:13670 https://cve.radiocsirt.org/vuln/suse-su-2025:02029-1 <p>Security update for apache2-mod_security2</p> <p>Security update for apache2-mod_security2</p> https://cve.radiocsirt.org/vuln/suse-su-2025:02029-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-48866 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: modsecurity-apache, Ubuntu:Pro:16.04:LTS: modsecurity-apache, Ubuntu:Pro:18.04:LTS: modsecurity-apache, Ubuntu:Pro:20.04:LTS: modsecurity-apache, Ubuntu:Pro:22.04:LTS: modsecurity-apache, Ubuntu:Pro:24.04:LTS: modsecurity-apache, Ubuntu:25.10: modsecurity-apache</p> <p>ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: modsecurity-apache, Ubuntu:Pro:16.04:LTS: modsecurity-apache, Ubuntu:Pro:18.04:LTS: modsecurity-apache, Ubuntu:Pro:20.04:LTS: modsecurity-apache, Ubuntu:Pro:22.04:LTS: modsecurity-apache, Ubuntu:Pro:24.04:LTS: modsecurity-apache, Ubuntu:25.10: modsecurity-apache</p> <p>ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-48866 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1215 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OWASP ModSecurity ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OWASP ModSecurity ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1215