CVE WATCH / VULNERABILITY DETAIL
CVE-2026-73857
HIGHCVSS 7.5NVD feed
Published 9 November 2026 · tracked since 10 November 2026
Description
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.15 until 3.0.17, XML request body processing with SecParseXmlIntoArgs set to On or OnlyArgs can leave XMLNodes::parsing_ctx_arg uninitialized in the SAX end-element callback. A sin
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124604 MEDIUM 6.2
- CVE-2026-124603 MEDIUM 6.2
- CVE-2026-124602 MEDIUM 6.2
- CVE-2026-124601 MEDIUM 6.2
- CVE-2026-124599 MEDIUM 6.2
- CVE-2026-124598 HIGH 7.5
- CVE-2026-109810 MEDIUM 6.1
- CVE-2026-109799 HIGH 7.5
- CVE-2026-109797 HIGH 7.1
- CVE-2026-107244 HIGH 7.6