CVE-2025-48866

CVE-2025-48866 is a denial-of-service vulnerability affecting ModSecurity versions prior to 2.9.10. The flaw stems from the "sanitiseArg" action, which can be manipulated to add an excessive number of arguments, leading to resource exhaustion. Rated 7.5 HIGH on CVSS, this vulnerability can be exploited remotely with low attack complexity, resulting in a complete loss of availability for affected web applications. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.