CVE-2026-61812
No score
[GHSA-cxqf-vgrr-xxrv: HTML decoder missing entities, leading to evasion]
What each source reports
OSVUBUNTU-CVE-2026-61812 No score
[GHSA-cxqf-vgrr-xxrv: HTML decoder missing entities, leading to evasion]
- Record
UBUNTU-CVE-2026-61812- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
modsecurityDebian:12 |
All versions, plus listed versions 3.0.10-13.0.11-13.0.12-13.0.12-1.13.0.12-1.1~exp1 Show 7 moreShow less3.0.13-13.0.14-13.0.15-13.0.16-13.0.9-13.0.9-1+deb12u13.0.9-1+deb12u2 |
None known |
modsecurityDebian:13 |
All versions, plus listed versions 3.0.14-13.0.14-1+deb13u13.0.15-13.0.16-1 |
None known |
modsecurityDebian:14 |
All versions, plus listed versions 3.0.14-13.0.15-13.0.16-1 |
None known |
modsecurity-apacheDebian:12 |
All versions, plus listed versions 2.9.10-12.9.11-12.9.12-22.9.13-12.9.7-1 Show 5 moreShow less2.9.7-1+deb12u12.9.7-1+deb12u22.9.8-12.9.8-1.12.9.9-1 |
None known |
modsecurity-apacheDebian:13 |
All versions, plus listed versions 2.9.11-12.9.11-1+deb13u12.9.12-22.9.13-1 |
None known |
modsecurity-apacheDebian:14 |
All versions, plus listed versions 2.9.11-12.9.12-22.9.13-1 |
None known |
modsecurity-apacheUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 2.7.4-12.7.5-12.7.7-12.7.7-1ubuntu12.7.7-22.7.7-2ubuntu0.1~esm12.7.7-2ubuntu0.1~esm2 |
None known |
modsecurity-apacheUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.9.0-12.9.0-1ubuntu0.1~esm12.9.0-1ubuntu0.1~esm2 |
None known |
modsecurity-apacheUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.9.1-32.9.2-12.9.2-1ubuntu0.1~esm12.9.2-1ubuntu0.1~esm2 |
None known |
modsecurityUbuntu:20.04:LTS |
All versions, plus listed versions 3.0.3-13.0.4-13.0.4-1build1 |
None known |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
modsecurity-apacheUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.9.3-12.9.3-1ubuntu0.12.9.3-1ubuntu0.1+esm1 |
None known |
modsecurityUbuntu:22.04:LTS |
All versions, plus listed versions 3.0.4-23.0.6-1 |
None known |
modsecurity-apacheUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.9.3-32.9.5-12.9.5-1ubuntu0.1~esm12.9.5-1ubuntu0.1~esm2 |
None known |
modsecurityUbuntu:24.04:LTS |
All versions, plus listed versions 3.0.10-13.0.11-13.0.12-13.0.12-1.1build13.0.12-1.1build2 |
None known |
modsecurity-apacheUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.9.7-12.9.7-1build22.9.7-1build32.9.7-1ubuntu0.24.04.1~esm1 |
None known |
modsecurityUbuntu:26.10 |
All versions, plus listed versions 3.0.14-1build23.0.15-13.0.16-1 |
None known |
modsecurity-apacheUbuntu:26.10 |
All versions, plus listed versions 2.9.12-2build12.9.13-1 |
None known |
modsecurityUbuntu:26.04:LTS |
All versions, plus listed versions 3.0.14-1build13.0.14-1build2 |
None known |
modsecurity-apacheUbuntu:26.04:LTS |
All versions, plus listed versions 2.9.12-22.9.12-2build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-61812 is a vulnerability with no CVSS score yet in modsecurity, published October 1, 2026. No source lists public exploit code. No source names a fixed version.