Red Hat Security Advisory

RHSA-2025:13716

mod_security security update

Released 2025-08-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.0) mod_security-2.9.3-12.el9_0.2, mod_security-mlogc-2.9.3-12.el9_0.2

TI-2025-31022 CVE-2025-48866

HIGH 72

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00867 Published 2025-06-02 Partial fix · 2.9.10 CWE-1050