ModSecurity flaws let uploads bypass checks and may trigger code execution
Two high-severity flaws have been disclosed in ModSecurity, the open-source web application firewall used with Apache, IIS, and Nginx. One issue can let malicious uploads pass filename checks, and the other can crash a worker process in a way that could lead to remote code execution. What the upload flaw allows CVE-2026-104269, also listed as GHSA-5pww-8rfg-9crf, affects ModSecurity 3.0.0 and later. It allows unauthenticated network attacks that bypass file checks…