Sploitus

24 exploited vulnerabilities in Modsecurity

Vulnerabilities with publicly known exploits

Vendors
Debian, Unknown, Apache, Linux Mint, Suse, Canonical
With known exploits
24
Affected Trustwave Modsecurity versions
< 2.9.7, 2.9.9, 2.9.6, 2.9.5, 3.0.12, 2.7.6, 2.7.4, 2.5.9
Affected Owasp Owasp Modsecurity Core Rule Set versions
< 3.3.8, 4.22.0
Affected Owasp Modsecurity versions
< 3.0.16, 3.0.12, 3.0.15, 2.9.10, 3.0.8, 3.0.6, 3.0.4, 3.0.10, 3.0.9, 3.0.0
Affected Mod Security versions
= 1.7, 1.7.1, 1.7.2, 1.7.4, 1.7.5, 1.9.4, 2.1

Vulnerabilities with exploits

Highest CVSS first — 8 of these already have exploit code on Sploitus

CVE-2020-22669
CVSS 9.8 CRITICAL 2022-09-02
CVE-2023-24021
CVSS 9.4 HIGH 2023-01-20FIX AVAILABLE
CVE-2026-21876 3 exploits
CVSS 9.3 CRITICAL 2026-01-08FIX AVAILABLE
coreruleset 4.21.0 - Firewall Bypass📄 OWASP CRS WAF Bypass
CVE-2026-52747
CVSS 8.6 HIGH 2026-07-06FIX AVAILABLE
CVE-2024-1019
CVSS 8.6 HIGH 2024-01-30FIX AVAILABLE
CVE-2026-42268
CVSS 8.2 HIGH 2026-05-01FIX AVAILABLE
CVE-2025-52891
CVSS 7.8 HIGH 2025-07-01FIX AVAILABLE
CVE-2025-48866
CVSS 7.8 HIGH 2025-05-11FIX AVAILABLE
CVE-2025-47947
CVSS 7.8 HIGH 2025-05-21FIX AVAILABLE
CVE-2022-48279
CVSS 7.8 HIGH 2022-12-06FIX AVAILABLE
CVE-2021-42717 1 exploit
CVSS 7.8 HIGH 2021-11-22FIX AVAILABLE
Exploit for Uncontrolled Recursion in Owasp Modsecurity
CVE-2020-15598 1 exploit
CVSS 7.8 HIGH 2020-09-14
ModSecurity 3.0.x Denial Of Service Vulnerability
CVE-2024-46292
CVSS 7.5 HIGH 2024-10-09FIX AVAILABLE
CVE-2023-38285
CVSS 7.5 HIGH 2023-07-26FIX AVAILABLE
CVE-2023-28882
CVSS 7.5 HIGH 2023-04-28FIX AVAILABLE
CVE-2003-1171
CVSS 7.5 HIGH 2003-12-31
CVE-2025-54571
CVSS 6.9 MEDIUM 2025-08-05FIX AVAILABLE
CVE-2007-1359 1 exploit
CVSS 6.8 MEDIUM 2007-03-08FIX AVAILABLE
mod_security 2.1.0 - ASCIIZ byte POST Rules Bypass
CVE-2018-13065 3 exploits
CVSS 6.1 MEDIUM 2018-07-03
ModSecurity 3.0.0 - Cross-Site Scripting VulnerabilityModSecurity 3.0.0 - Cross-Site Scripting
CVE-2026-52761
CVSS 5.8 MEDIUM 2026-07-06FIX AVAILABLE
CVE-2019-25043
CVSS 5.3 MEDIUM 2021-05-06FIX AVAILABLE
CVE-2013-5705 1 exploit
CVSS 5.0 MEDIUM 2014-04-15FIX AVAILABLE
ModSecurity HTTP请求分块编码安全限制绕过漏洞
CVE-2013-2765 4 exploits
CVSS 5.0 MEDIUM 2013-06-26FIX AVAILABLE
ModSecurity 空指针间接引用远程拒绝服务漏洞(CVE-2013-2765)ModSecurity - Remote Null Pointer Dereference
CVE-2009-1902 1 exploit
CVSS 5.0 MEDIUM 2009-06-03FIX AVAILABLE
ModSecurity < 2.5.9 - Remote Denial of Service