Technical articles, practical guides, and project updates for anyone using or deploying ModSecurity. Learn best practices, tuning techniques, and real-world insights from the community.
The ModSecurity documentation has moved from the GitHub wiki to a proper documentation site at modsecurity.org/docs. The wiki is now deprecated, and from now on the documentation can be improved the same way as the code: with a pull request.
We would like to share our take on several advisories, which were published on September 29, 2026. There were 8 issues in libmodsecurity3; 6 of them are present in mod_security2 as well.
Read more: Security Update Digest: Overview of Recent Advisory Fixes, 2026 September
We would like to share our take on CVE-2026-52747 and CVE-2026-52761, which were published on June 29, 2026.
We would like to share our take on CVE-2026-30923 and CVE-2026-42268, which were published on April 22, 2026, as well as some additional issues that were fixed.