Known vulnerabilities in mod_security_crs

Vendor: openEuler
Software: mod_security_crs
Software CPE: cpe:2.3:o:openeuler:mod_security_crs:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mod_security_crs mod_security_crs is affected by 5 known vulnerabilities: 5 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121073 - Incomplete Filtering of Multiple Instances of Special Elements
CVE-2026-21876		 CWE-794 Medium
No
No
 3.2.2-3, 3.3.5-3 07.01.2026 SB2026010786
SB2026011694
SB2026011695
and 8 more
#VU72091 - Improper input validation
CVE-2022-39958		 CWE-20 Medium
No
No
 3.2.2-1 09.02.2023 SB2023020956
SB2023052103
SB2022093048
and 3 more
#VU72090 - Improper input validation
CVE-2022-39957		 CWE-20 Medium
No
No
 3.2.2-1 09.02.2023 SB2023020956
SB2023052103
SB2022093048
and 3 more
#VU72089 - Improper input validation
CVE-2022-39956		 CWE-20 Medium
No
No
 3.2.2-1 09.02.2023 SB2023020956
SB2023052103
SB2023060906
and 14 more
#VU72087 - Improper input validation
CVE-2022-39955		 CWE-20 Medium
No
No
 3.2.2-1 09.02.2023 SB2023020956
SB2023052103
SB2022092752
and 3 more