Multiple ModSecurity Vulnerabilities Allow Attackers to Bypass Firewall Rules

Multiple vulnerabilities have been disclosed in OWASP ModSecurity, a widely used open-source web application firewall (WAF), allowing attackers to bypass security rules under specific conditions. The flaws, tracked as CVE-2026-52761 and CVE-2026-52747, affect ModSecurity versions up to 3.0.15 and have been addressed in version 3.0.16. The...

Les hele artikkelen hos kilden.