diff --git a/nginx/modsecurity/global-exceptions.conf b/nginx/modsecurity/global-exceptions.conf
index b6e0bdc..a173d3c 100644
--- a/nginx/modsecurity/global-exceptions.conf
+++ b/nginx/modsecurity/global-exceptions.conf
@@ -130,3 +130,10 @@ SecRule REQUEST_URI "@streq /apps/files/api/v1/views" \
     nolog, \
     ctl:ruleEngine=Off, \
     msg:'TUNING: ModSecurity desativado para a API de views de arquivos do Nextcloud'"
+SecRule REQUEST_URI "@rx ^/(index\.php/core/preview|ocs/v2\.php/apps/user_status/api/v1/user_status)" \
+    "id:10027, \
+    phase:1, \
+    pass, \
+    nolog, \
+    ctl:ruleEngine=Off, \
+    msg:'TUNING: ModSecurity desativado para as APIs de Preview e User Status do Nextcloud'"