Skip to content

CVE record · 1 source

CVE-2026-103932

CVSS 5.8

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.

Vendor: Owasp-Modsecurity
Product: ModSecurity
CVSS v3.1: 5.8 AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Weakness: CWE-253
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

34

CVE NVD 7h ago

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.5 until 3.0.17, the PCRE2 implementation of @rxGlobal in src/utils/regex.cc converts pcre2_match match-limit…

CVSS 5.8 Fix available CVE-2026-103932 Owasp-Modsecurity