ModSecurity Denial of Service Vulnerability

A vulnerability was identified in ModSecurity. A remote attacker could exploit this vulnerability to trigger denial of service condition on the targeted system.

Note:

Proof of Concept exploit code is publicly available for CVE-2026-30923. Under specific configurations, a query string that contains a single character is enough to cause a segfault, this can be abused in a denial of service attack by a simple one liner bash script.