Question ModSecurity on Plesk 18.0.81.2: isolated rule download, offline rollback and security updates

[pepinacle14]

Server operating system version

Ubuntu 22.04 (inventory dated 13 October 2026)

Plesk version and microupdate number

18.0.81.2 (inventory dated 13 October 2026)

Hi everyone,

A dated inventory on 13 October 2026 recorded Ubuntu 22.04, Plesk 18.0.81.2 and Apache ModSecurity 2.9.14, with Comodo Free. Please treat these versions and channel observations as dated examples and advise which supported packages are available now.

Could someone point us to the supported procedures and current official package references for the following questions?

1. How can we obtain the exact Atomic Standard package bundled with Plesk (tortix), with its version and integrity information, for offline inspection without selecting the ruleset, installing components or restarting services? We need the Plesk basic feed, not a different Atomic product or trial.

2. What is the supported procedure to restore locally retained Comodo rules together with the original provider and WAF settings, without downloading Comodo again? Please specify the files/settings to preserve and whether modsecurity_ctl --rollback also restores the state reported by plesk bin server_pref --show-web-app-firewall. Our static inspection of the helper shows filesystem restoration, but does not establish restoration of all Plesk preferences.

3. On 13 October, our configured Plesk channel offered CRS 4.29.0. Upstream released security fixes in 4.30.0 and 4.25.2 LTS on 2 October. Which corrected package or supported custom-ruleset procedure is available for this environment now?

CRS versions 4.30.0 and 4.25.2 LTS released

The OWASP CRS team is pleased to announce two coordinated releases today: v4.30.0 (main branch) and v4.25.2 (v4 LTS). Both fix the same three security vulnerabilities, published today as GitHub security advisories, along with a file upload bypass in the PHP and Java upload checks. Users on...

coreruleset.org

4. Upstream ModSecurity 2.9.15 also contains security fixes. Our 13 October inspection recorded libapache2-modsecurity-plesk 1:2.9.14-v.ubuntu.22.04+p18.0.81.0+t260906.2200 in the Plesk channel. Does Plesk provide 2.9.15 or a package with the corresponding backports for Ubuntu 22.04? If so, please identify the package and channel.

Release v2.9.15 · owasp-modsecurity/ModSecurity

Full list of changes: fix: t:htmlEntityDecode does not decode all ASCII named HTML entities [PR from private repo - @marcstern, @fzipi, @airween; fixed GHSA-cxqf-vgrr-xxrv] fix: use secure value f...

github.com

Please also confirm current Atomic Standard support for Ubuntu 22.04. Our 13 October documentation review found apparently conflicting information: the Atomic availability article said it was supported since Plesk 18.0.67, while the Ubuntu 22.04 support article listed it as unavailable.

If a requested operation is unsupported, please explain the supported alternative. This is an information request; any paid subscription or server intervention must be agreed separately.

Thanks.

 

[Sebahat.hadzhi]

Hi, @pepinacle14 . I am not entirely sure whether there's a supported method for point 1 and 2 or if that's possible in the first place, but I will consult with our team on Monday and let you know.

Regarding point 3 and 4, the mod_security CRS was updated to 4.30.0 and ModSecurity was updated 2.9.15 - both updates should be shipped along with Plesk Obsidian 18.0.82.

Starting with Plesk 18.0.67 the Atomic ruleset is available for all OSes, including Ubuntu 22.04.

 

[Sebahat.hadzhi]

@pepinacle14 , you should be able to fetch and examine the Atomic Standard archive without touching the WAF settings on any Plesk server with the ModSecurity component installed with:

curl -A Plesk -X PUT --data-binary @/var/lib/plesk/modsec/tortix-unpaid-license.key \
  https://updates.atomicorp.com/pgui_v/dbp.php -o atomic_standard.tar.bz2
curl -A Plesk -O https://www.atomicorp.com/installer/tortix_waf.conf

Retained Comodo rules can go back in without a download, but only as a Custom rule set. Re-selecting Comodo (free) always downloads again. I cannot suggest a supported method for achieving that. I would suggest opening a ticket with Plesk support for further assistance on this matter.

 

[pepinacle14]

Hi @Sebahat.hadzhi,

Thanks for checking with your team and getting back to us with these details! This clarifies both how to inspect Atomic without changing the WAF and the limitations of restoring Comodo.

We will keep our current Comodo setup for now. Really appreciate your help and the follow-up!

Best,
Sergio