PT-2026-55934 · Undefined · Undefined
Published
2026-07-06
·
Updated
2026-07-06
·
CVE-2026-52761
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
🚨 Two ModSecurity WAF bypass flaws disclosed — patch to v3.0.16 now!
🕳️ CVE-2026-52747 (High, 7.5): The multipart parser strips line breaks from form fields — WAF sees one value, backend sees another. Payloads slip past rules undetected.
🐛 CVE-2026-52761 (Moderate, 5.3): sizeof() on a pointer bug breaks UTF-8 normalization on i386 — rules relying on it can be bypassed.
⬆️ Upgrade immediately + avoid i386 deployments.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined