Sploitus

24 exploited vulnerabilities in Modsecurity

Vulnerabilities with publicly known exploits

Vendors
Debian, Unknown, Apache, Linux Mint, Suse, Canonical
With known exploits
24
Affected Owasp Owasp Modsecurity Core Rule Set versions
= 3.2.0, 3.3.8, 4.22.0
Affected Trustwave Modsecurity versions
< 2.9.7, 2.9.9, 2.9.6, 2.9.5, 3.0.12, 2.7.6, 2.7.4, 2.5.9
Affected Owasp Modsecurity versions
< 3.0.16, 3.0.12, 3.0.15, 2.9.10, 3.0.8, 3.0.6, 3.0.4, 3.0.10, 3.0.9, 2.9.12, 3.0.0
Affected Mod Security versions
= 1.7, 1.7.1, 1.7.2, 1.7.4, 1.7.5, 1.9.4, 2.1

Vulnerabilities with exploits

Highest CVSS first — 8 of these already have exploit code on Sploitus

CVE-2020-22669
CVSS 9.8 CRITICAL 2022-09-02
CVE-2023-24021
CVSS 7.5 HIGH 2023-01-20FIX AVAILABLE
CVE-2026-21876 6 exploits
CVSS 9.3 CRITICAL 2026-01-08FIX AVAILABLE
CVE-2026-52747
CVSS 8.6 HIGH 2026-07-06FIX AVAILABLE
CVE-2024-1019
CVSS 8.6 HIGH 2024-01-30FIX AVAILABLE
CVE-2026-42268
CVSS 8.2 HIGH 2026-05-01FIX AVAILABLE
CVE-2025-52891
CVSS 6.5 MEDIUM 2025-07-01FIX AVAILABLE
CVE-2025-48866
CVSS 7.5 HIGH 2025-05-11FIX AVAILABLE
CVE-2025-47947
CVSS 7.5 HIGH 2025-05-21FIX AVAILABLE
CVE-2022-48279
CVSS 7.5 HIGH 2022-12-06FIX AVAILABLE
CVE-2021-42717 2 exploits
CVSS 7.5 HIGH 2021-11-22FIX AVAILABLE
CVE-2020-15598 1 exploit
CVSS 7.5 HIGH 2020-09-14
CVE-2024-46292
CVSS 7.5 HIGH 2024-10-09FIX AVAILABLE
CVE-2023-38285
CVSS 7.5 HIGH 2023-07-26FIX AVAILABLE
CVE-2023-28882
CVSS 7.5 HIGH 2023-04-28FIX AVAILABLE
CVE-2003-1171
CVSS 7.5 HIGH 2003-12-31
CVE-2025-54571
CVSS 6.9 MEDIUM 2025-08-05FIX AVAILABLE
CVE-2007-1359 1 exploit
CVSS 6.8 MEDIUM 2007-03-08FIX AVAILABLE
CVE-2018-13065 3 exploits
CVSS 6.1 MEDIUM 2018-07-03
CVE-2026-52761
CVSS 5.8 MEDIUM 2026-07-06FIX AVAILABLE
CVE-2019-25043
CVSS 5.3 MEDIUM 2021-05-06FIX AVAILABLE
CVE-2013-5705 1 exploit
CVSS 5.0 MEDIUM 2014-04-15FIX AVAILABLE
CVE-2013-2765 4 exploits
CVSS 5.0 MEDIUM 2013-06-26FIX AVAILABLE
CVE-2009-1902 1 exploit
CVSS 5.0 MEDIUM 2009-06-03FIX AVAILABLE