Modsecurity: [GHSA-vmg8-j66p-vgvw: Response body inspection bypass via non-canonical Content-Type casing] (CVE-2026-73856)

CVE-2026-73856 describes a vulnerability in ModSecurity where response body inspection can be bypassed due to the handling of Content-Type headers with non-canonical casing. This means that if the Content-Type header is presented with unusual letter casing, ModSecurity may fail to inspect the response body as intended, potentially allowing malicious content to evade detection. The issue affects multiple specific versions of ModSecurity as listed. No CVSS score or detailed exploit information is provided.

The vulnerability could allow attackers to bypass response body inspection in ModSecurity, potentially enabling malicious payloads or content to pass through security filters undetected. This reduces the effectiveness of ModSecurity's protective capabilities but does not directly indicate remote code execution or data breach. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should be aware of this bypass vector and consider additional compensating controls if possible. No official patch or workaround information is provided in the current data.