CVE-2026-73857
No score
[GHSA-jx3r-phvx-2jmj: XML request body processor dereferences an uninitialized parser context pointer]
What each source reports
OSVUBUNTU-CVE-2026-73857 No score
[GHSA-jx3r-phvx-2jmj: XML request body processor dereferences an uninitialized parser context pointer]
- Record
UBUNTU-CVE-2026-73857- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
modsecurityDebian:12 |
All versions, plus listed versions 3.0.10-13.0.11-13.0.12-13.0.12-1.13.0.12-1.1~exp1 Show 7 moreShow less3.0.13-13.0.14-13.0.15-13.0.16-13.0.9-13.0.9-1+deb12u13.0.9-1+deb12u2 |
None known |
modsecurityDebian:13 |
All versions, plus listed versions 3.0.14-13.0.14-1+deb13u13.0.15-13.0.16-1 |
None known |
modsecurityDebian:14 |
All versions, plus listed versions 3.0.14-13.0.15-13.0.16-1 |
None known |
modsecurityUbuntu:20.04:LTS |
All versions, plus listed versions 3.0.3-13.0.4-13.0.4-1build1 |
None known |
modsecurityUbuntu:22.04:LTS |
All versions, plus listed versions 3.0.4-23.0.6-1 |
None known |
modsecurityUbuntu:24.04:LTS |
All versions, plus listed versions 3.0.10-13.0.11-13.0.12-13.0.12-1.1build13.0.12-1.1build2 |
None known |
modsecurityUbuntu:26.10 |
All versions, plus listed versions 3.0.14-1build23.0.15-13.0.16-1 |
None known |
modsecurityUbuntu:26.04:LTS |
All versions, plus listed versions 3.0.14-1build13.0.14-1build2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-73857 is a vulnerability with no CVSS score yet in modsecurity, published October 1, 2026. No source lists public exploit code. No source names a fixed version.