Skip to content
OpenAdvisories

Package · Azure Linux

mod_security

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-61812

    ModSecurity: HTML decoder missing entities, leading to evasion

    ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 2.9.15 and 3.0.17, t:htmlEntityDecode recognizes only a small subset of named HTML entities, so rules that depend on the transformation can…

    owasp-modsecurity ModSecurity modsecurity modsecurity-apache Debian Azure Linux
  • Medium 6.9
    CVE-2025-54571

    ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure

    ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP sc…

    owasp-modsecurity ModSecurity modsecurity modsecurity-apache Debian Ubuntu Azure Linux