Coreruleset Coreruleset vulnerabilities

• coreruleset, owasp modsecurity core rule set +1 more OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks CVE-2026-33691 Fix available 6.8 MediumApril 2, 2026
• coreruleset, owasp modsecurity core rule set +1 more OWASP CRS has multipart bypass using multiple content-type parts CVE-2026-21876 Public exploitFix available EPSS 17.7% 9.3 CriticalJanuary 8, 2026