CVE-2008-5676: Breach Modsecurity

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service (daemon crash) or bypass the product's functionality via unknown vectors related to "transformation caching."

Affected products

• Breach Modsecurity: up to and including 2.5.0; up to and including 2.5.5; version 2.5.1 only; version 2.5.2 only; version 2.5.3 only; version 2.5.4 only

Published 2008-12-19. Last modified 2026-06-16.