CVE-2026-107835Published
OWASP Coraza WAF: Cookie Parser Confusion
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-107835 · Microsoft / collected KEV context
cve-program · CVE-2026-107835
- https://github.com/corazawaf/coraza/security/advisories/GHSA-g4qm-m288-5cp9
- https://github.com/corazawaf/coraza/commit/0b940e197ad9983fb3aa36e84f1f81ff985461af
- https://github.com/corazawaf/coraza/commit/9f8521398d1ff023b958fad0b944cac265763866
- https://github.com/corazawaf/coraza/releases/tag/v3.8.1
euvd · EUVD-2026-95930
- https://github.com/corazawaf/coraza/security/advisories/GHSA-g4qm-m288-5cp9
- https://github.com/corazawaf/coraza/commit/0b940e197ad9983fb3aa36e84f1f81ff985461af
- https://github.com/corazawaf/coraza/commit/9f8521398d1ff023b958fad0b944cac265763866
- https://github.com/corazawaf/coraza/releases/tag/v3.8.1
nvd · CVE-2026-107835
- https://github.com/corazawaf/coraza/commit/0b940e197ad9983fb3aa36e84f1f81ff985461af
- https://github.com/corazawaf/coraza/commit/9f8521398d1ff023b958fad0b944cac265763866
- https://github.com/corazawaf/coraza/releases/tag/v3.8.1
- https://github.com/corazawaf/coraza/security/advisories/GHSA-g4qm-m288-5cp9
osv · GHSA-g4qm-m288-5cp9
- https://github.com/corazawaf/coraza/security/advisories/GHSA-g4qm-m288-5cp9
- https://github.com/corazawaf/coraza/commit/0b940e197ad9983fb3aa36e84f1f81ff985461af
- https://github.com/corazawaf/coraza/commit/9f8521398d1ff023b958fad0b944cac265763866
- https://github.com/corazawaf/coraza
- https://github.com/corazawaf/coraza/releases/tag/v3.8.1
osv · GO-2026-6694
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.