Vulnerabilities in coreruleset

2 results
CVE-2026-21876CRITICALOWASP CRS has multipart bypass using multiple content-type partsEPSS 13.1%CVE-2026-33691MEDIUMOWASP CRS: Whitespace padding in filenames bypasses file upload extension checksEPSS 1.0%