Osama Ali on Cyshield Seclab

Osama Ali on Cyshield Seclabhttps://seclab.cyshield.com/authors/osama-ali/Recent content in Osama Ali on Cyshield SeclabHugo -- gohugo.ioen© 2026 Cyshield.Mon, 05 Oct 2026 00:00:00 +0000Coraza WAF Body Processors: SecArgumentsLimit Bypass Causes Memory-Exhaustion DoShttps://seclab.cyshield.com/advisories/cve-2026-41510/Fri, 02 Oct 2026 00:00:00 +0000https://seclab.cyshield.com/advisories/cve-2026-41510/A high severity vulnerability in Coraza WAF versions 3.0.0 through 3.8.0 allows remote, unauthenticated attackers to bypass SecArgumentsLimit when processing JSON or URL-encoded request bodies. Crafted requests can trigger excessive memory consumption, potentially causing process termination and denial of service. The issue is tracked as CVE-2026-41510 (CVSS 7.2) and is fixed in version 3.8.1.