CVE-2026-41510

The OWASP Coraza WAF library (versions 3.0.0 through 3.8.0 ) contains a flaw where request arguments are silently dropped once the SecArgumentsLimit (default 1000) is reached. Because the engine fails to set an error flag or notify rules, an unauthenticated attacker can bypass security rules targ...