Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-Type

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-114100 · Microsoft / collected KEV context

EUVD-2026-106903

GHSA-5846-6v99-476c

GHSA-w253-m66g-rx24

GO-2026-6698

cve-program · CVE-2026-114100

• https://github.com/corazawaf/coraza/security/advisories/GHSA-w253-m66g-rx24
• https://www.vulncheck.com/advisories/coraza-from-3.0.4-before-3.8.1-request-body-inspection-bypass-via-content-type

euvd · EUVD-2026-106903

• https://github.com/corazawaf/coraza/security/advisories/GHSA-w253-m66g-rx24
• https://www.vulncheck.com/advisories/coraza-from-3.0.4-before-3.8.1-request-body-inspection-bypass-via-content-type

nvd · CVE-2026-114100

• https://github.com/corazawaf/coraza/security/advisories/GHSA-w253-m66g-rx24
• https://www.vulncheck.com/advisories/coraza-from-3.0.4-before-3.8.1-request-body-inspection-bypass-via-content-type

osv · GHSA-w253-m66g-rx24

• https://github.com/corazawaf/coraza/security/advisories/GHSA-w253-m66g-rx24
• https://github.com/corazawaf/coraza/commit/3b6241ef895b089c66a59e51068a81cf40986e4d
• https://github.com/corazawaf/coraza/commit/a55950ffa161f33a29e14f87d926d7df3b85cc74
• https://github.com/corazawaf/coraza/commit/dd100261cf1d2e2b053803a50c9db28dcaaa4b7c
• https://github.com/corazawaf/coraza
• https://github.com/corazawaf/coraza/releases/tag/v3.8.1

osv · GO-2026-6698

• https://github.com/corazawaf/coraza/security/advisories/GHSA-w253-m66g-rx24
• https://github.com/corazawaf/coraza/commit/3b6241ef895b089c66a59e51068a81cf40986e4d
• https://github.com/corazawaf/coraza/commit/a55950ffa161f33a29e14f87d926d7df3b85cc74
• https://github.com/corazawaf/coraza/commit/dd100261cf1d2e2b053803a50c9db28dcaaa4b7c
• https://github.com/corazawaf/coraza/releases/tag/v3.8.1

No related operational record is retained in the current change model.