ModSecurity Denial of Service Vulnerability
Release Date: 7 May 2026
RISK: Medium Risk
TYPE: Security software and application - Security Software & Appliance
A vulnerability was identified in ModSecurity. A remote attacker could exploit this vulnerability to trigger denial of service condition on the targeted system.
Note:
Proof of Concept exploit code is publicly available for CVE-2026-30923. Under specific configurations, a query string that contains a single character is enough to cause a segfault, this can be abused in a denial of service attack by a simple one liner bash script.
Impact
- Denial of Service
System / Technologies affected
- libModSecurity3 version 3.0.15
Solutions
Before installation of the software, please visit the software vendor web-site for more details.
Apply fixes issued by the vendor:
沒有留言:
發佈留言