<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: modsecurity</title><description>Every new CVE for modsecurity.</description><link>https://agentprime.io/</link><item><title>CVE-2026-104269: ModSecurity: RFC 2231 `filename*` Parameter Bypasses Multipart Filename Rules on RFC-Compliant Backends (Go, Python, Node, Java)</title><link>https://agentprime.io/advisories/CVE-2026-104269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104269/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 15:51:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73856: ModSecurity: Response Body Inspection Bypass</title><link>https://agentprime.io/advisories/CVE-2026-73856/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73856/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 15:50:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-61813: ModSecurity: Incorrect libcurl TLS hostname verification setting in HttpsClient::download</title><link>https://agentprime.io/advisories/CVE-2026-61813/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-61813/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 15:48:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103932: ModSecurity: PCRE2 `@rxGlobal` match-limit errors are converted to no-match</title><link>https://agentprime.io/advisories/CVE-2026-103932/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103932/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 15:42:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-52747: ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass</title><link>https://agentprime.io/advisories/CVE-2026-52747/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52747/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 21:42:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-52761: ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture</title><link>https://agentprime.io/advisories/CVE-2026-52761/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52761/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 21:40:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42268: ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators</title><link>https://agentprime.io/advisories/CVE-2026-42268/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42268/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 21:40:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-30923: libModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings</title><link>https://agentprime.io/advisories/CVE-2026-30923/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-30923/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 May 2026 18:46:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-54571: ModSecurity&apos;s Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure</title><link>https://agentprime.io/advisories/CVE-2025-54571/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54571/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 Aug 2025 23:39:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-52891: ModSecurity empty XML tag causes segmentation fault</title><link>https://agentprime.io/advisories/CVE-2025-52891/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-52891/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Jul 2025 15:03:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-48866: ModSecurity has possible DoS vulnerability in sanitiseArg action</title><link>https://agentprime.io/advisories/CVE-2025-48866/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-48866/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Jun 2025 15:46:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-47947: ModSecurity Has Possible DoS Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-47947/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47947/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 May 2025 22:08:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-27110: Libmodsecurity3 has possible bypass of encoded HTML entities</title><link>https://agentprime.io/advisories/CVE-2025-27110/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-27110/</guid><description>CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Feb 2025 20:00:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1019: WAF bypass of the ModSecurity v3 release line</title><link>https://agentprime.io/advisories/CVE-2024-1019/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1019/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 30 Jan 2024 16:09:42 GMT</pubDate><category>CVE</category></item></channel></rss>