ModSecurity Vulnerabilities Allow WAF Rule Evasion

ModSecurity, an open-source web application firewall, has multiple vulnerabilities (CVE-2026-52761 and CVE-2026-52747) that enable attackers to bypass security rules through specially crafted HTTP requests. These flaws affect versions up to 3.0.15 and were addressed in version 3.0.16. The vulnerabilities stem from inconsistencies in input transformation and request parsing, posing a risk to web applications relying on this firewall for security. Users are advised to upgrade to the latest version to mitigate potential exploitation. The flaws have been classified as moderate severity, indicating a significant but not critical risk.

Key Points: • ModSecurity vulnerabilities CVE-2026-52761 and CVE-2026-52747 allow rule evasion. • Affected versions include ModSecurity up to 3.0.15; users should upgrade to 3.0.16. • The vulnerabilities are due to input transformation and request parsing inconsistencies.