Skip to content
Every CVE
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Coreruleset
Coreruleset vulnerabilities
Products
Coreruleset
2
Newest
coreruleset
,
owasp
modsecurity core rule set
+1 more
OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks
CVE-2026-33691
Fix available
6.8
Medium
April 2, 2026
coreruleset
,
owasp
modsecurity core rule set
+1 more
OWASP CRS has multipart bypass using multiple content-type parts
CVE-2026-21876
Public exploit
Fix available
EPSS 17.7%
9.3
Critical
January 8, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open