CVE-2025-27110: owasp-modsecurity modsecurity Encoding Error
Vulnerability summary
CVE-2025-27110 is a high (CVSS 7.9) Encoding Error vulnerability in owasp-modsecurity modsecurity. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 40.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 25-02-2025PublishedVulnerability first disclosed.
- 26-02-2025Last modifiedVulnerability information updated.
Description
Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. A bug that exists only in Libmodsecurity3 version 3.0.13 means that, in 3.0.13, Libmodsecurity3 can't decode encoded HTML entities if they contains leading zeroes. Version 3.0.14 contains a fix. No known workarounds are available.
CVSS metrics
6 scores · 4 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.9HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
- NVDNIST7.9HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS trend
Probability
0.48%
Chance of exploitation in the next 30 days
Percentile
40%
Versus all other CVEs
30-day change
+0.01 pp
From 0.48% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundModsecurity
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Debian1 product
- modsecurity< 3.0.14-1
Opensuse1 product
- modsecurity&distro=openSUSE Tumbleweed< 3.0.14-1.1
Owasp-modsecurity1 product
- modsecurity= 3.0.13
Trustwave1 product
- modsecurity3.0.13
Ubuntu1 product
- modsecurityAll versions (No fix recorded)
5 vendors · 5 products
References
7 links- github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-42w7-rmv5-4x2jX Refsource CONFIRMREPORTVendor Advisory
- lists.opensuse.org/archives/…Advisory