CVE-2026-104269 - ModSecurity: RFC 2231 `filename*` Parameter Bypasses Multipart Filename Rules on RFC-Compliant Backends (Go, Python, Node, Java)
CVE ID :CVE-2026-104269 Published : Nov. 5, 2026, 4:17 p.m. | 51 minutes ago Description :ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, ModSecurity's multipart parser does not apply the RFC 2231...