VULNRABLE / Vulnerability / CVE-2026-41508
CVE-2026-41508
MEDIUM LOW github.com/corazawaf/coraza/v3 GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA
Summary
Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling
What this means
CVE-2026-41508 is a medium-severity vulnerability affecting github.com/corazawaf/coraza/v3, rated CVSS 5.5. Published October 7, 2026.
View full advisory at GHSA →