Skip to content
Threat Feed
Subscribe

Tag

Web-Application-Firewall

3 briefs RSS
high advisory

Coraza WAF Silent Argument Limit Bypass via Parameter Flooding

Coraza WAF silently drops parameters when the configured argument limit is reached, allowing attackers to evade security rules by flooding requests with filler parameters that force malicious payloads to be ignored by the WAF engine.

Coraza WAF +1 web-application-firewall defense-evasion parameter-flooding security-bypass denial-of-service waf coraza
2t updated
high advisory

CVE-2026-92749 - Insecure Session Signing Secret Generation in SafeLine

SafeLine versions up to 9.4.1 are vulnerable to unauthorized administrative access due to the derivation of session-signing secrets using a weak time-seeded PRNG.

SafeLine web-application-firewall cryptographic-vulnerability privilege-escalation
2t
medium advisory

BIG-IP Advanced WAF/ASM Denial-of-Service Vulnerability (CVE-2026-40060)

CVE-2026-40060 describes a vulnerability in F5 BIG-IP Advanced WAF and ASM security policies where undisclosed requests can cause the `bd` process to terminate, leading to a denial-of-service condition.

BIG-IP Advanced WAF +1 denial-of-service web application firewall F5 CVE-2026-40060
2r 1t 1c