Skip to content

CVE-2026-73857

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 9, 2026
Last Seen
November 9, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Severity ModSecurity Vulnerabilities Allow WAF Bypass70.5

Two high-severity vulnerabilities in ModSecurity, tracked as CVE-2026-104269 and CVE-2026-73857, were disclosed on November 5, 2026. CVE-2026-104269 allows attackers to bypass file upload restrictions due to a parser mismatch in the multipart parser, affecting versions 3.0.0 and later. The flaw can...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Denial of ServiceRemote Code ExecutionCVE-2026-104269CWE-787 - Out-of-bounds WriteCWE-824 - Access of Uninitialized PointerGoJavaModSecurity WAFPHPNode.jsPythonGHSA-5pww-8rfg-9crf