coreruleset
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| coreruleset | 2 | – | Apr 2, 2026 |
Exploited and recent CVEs
- CVE-2026-33691 OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks 3.8%
- CVE-2026-21876 OWASP CRS has multipart bypass using multiple content-type parts 17.7%