CVE-2026-61813 | OWASP ModSecurity up to 2.9.14/3.0.16 Https Client Download https_client.cc HttpsClient::download certificate validation

A vulnerability was found in OWASP ModSecurity ModSecurity up to 2.9.14/3.0.16. It has been rated as problematic. This issue affects the function HttpsClient::download of the file src/utils/https_client.cc of the component Https Client Download. The manipulation leads to improper certificate validation.

This vulnerability is documented as CVE-2026-61813. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More