zyxel-wax650s-research-notebook-public

Zyxel WAX650S Research Notebook Public-safe research notebook for Zyxel WAX650S firmware V7.10ABRM.4C0. This repo is written as a story-format wiki for researchers and future LLM-assisted follow-up work. It captures how the lab was brought up, which findings were confirmed, which chains failed, a...

CLSA-2026-1792634626 mod_auth_openidc: Fix of CVE-2026-54789

CVE-2026-54789: fix out-of-bounds read/write in the state-cookie parser...

AlmaLinux 9.6 [TuxCare] Security Update: mod_auth_openidc (ALMALINUX9.6:CLSA-2026:1792634626)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792634626 advisory. - modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID...

Rocky Linux 9.6 [TuxCare] Security Update: mod_auth_openidc (ALMALINUX9.6:CLSA-2026:1792634626)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792634626 advisory. - modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID...

AlmaLinux 9.2 [TuxCare] Security Update: mod_auth_openidc (ALMALINUX9.2:CLSA-2026:1791839568)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791839568 advisory. - modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID...

GO-2026-6694 Coraza has Cookie Parser Confusion in github.com/corazawaf/coraza

Coraza has Cookie Parser Confusion in github.com/corazawaf/coraza...

PT-2026-118016

Coraza has Cookie Parser Confusion in github.com/corazawaf/coraza...

CVE-2026-107835 OWASP Coraza WAF: Cookie Parser Confusion

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.ParseCookies in internal/cookies/cookies.go handles boundary ASCII control characters and control-only or empty cookie names differently from several backend cookie parsers. An...

CVE-2026-107835

The OWASP Coraza WAF library (prior to version 3.8.1 ) contains a Cookie Parser Confusion vulnerability in the internal/cookies.ParseCookies function within internal/cookies/cookies.go. The root cause is that the library handles boundary ASCII control characters and control-only or empty cookie n...

CVE-2026-107835 OWASP Coraza WAF: Cookie Parser Confusion

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.ParseCookies in internal/cookies/cookies.go handles boundary ASCII control characters and control-only or empty cookie names differently from several backend cookie parsers. An...

CVE-2026-107835 OWASP Coraza WAF: Cookie Parser Confusion

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.ParseCookies in internal/cookies/cookies.go handles boundary ASCII control characters and control-only or empty cookie names differently from several backend cookie parsers. An...

GHSA-G4QM-M288-5CP9 Coraza has Cookie Parser Confusion

Summary Coraza's cookie parser internal/cookies.ParseCookies does not strip ASCII control characters CTLs from the edges of a cookie name/value before they're matched against REQUESTCOOKIES / REQUESTCOOKIESNAMES. When a CTL sits directly next to the = separator, Coraza absorbs it into the adjacen...

Coraza has Cookie Parser Confusion

Summary Coraza's cookie parser internal/cookies.ParseCookies does not strip ASCII control characters CTLs from the edges of a cookie name/value before they're matched against REQUESTCOOKIES / REQUESTCOOKIESNAMES. When a CTL sits directly next to the = separator, Coraza absorbs it into the adjacen...

Important: mod_auth_openidc

Issue Overview: modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser...

Important: mod_auth_openidc

Issue Overview: modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser...

Amazon Linux 2023 : mod_auth_openidc (ALAS2023-2026-2155)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2155 advisory. modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an...

Amazon Linux 2 : mod_auth_openidc (ALAS-2026-3920)

The version of modauthopenidc installed on the remote host is prior to 1.8.8-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3920 advisory. modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements...

Malicious code in express-cookie-parser (npm)

This package impersonates the popular 'cookie-parser' package. Remote code execution, persistence, self-deletion, and obfuscation found in the package's code confirm its malicious nature. --- Credit: OpenSSF source...

Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3953-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217...