VULNRABLE / Vulnerability / CVE-2026-41504
CVE-2026-41504
MEDIUM LOW github.com/corazawaf/coraza/v3 GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA
Summary
Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields
What this means
CVE-2026-41504 is a medium-severity vulnerability affecting github.com/corazawaf/coraza/v3, rated CVSS 5.5. Published October 7, 2026.
View full advisory at GHSA →