corazawaf
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 12
en
Verify to analyze this security profile
As of 10/25/2026, corazawaf recorded 12 security vulnerabilities in the last 90 days across 1 products, including 2 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, coraza had the most security vulnerabilities in the corazawaf ecosystem, with 12 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-114101Coraza before 3.8.1 Multipart filename* Charset Handling FILES Rule BypassCVE-2026-114100Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-TypeCVE-2026-114099Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key CollisionCVE-2026-41508OWASP Coraza WAF: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handlingCVE-2026-41504OWASP Coraza WAF: Native audit-log format allows CRLF injection and log forgery via request body and header fields14 Results | Page 1 of 2
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |