CVE-2026-107835 | CorazaWAF Coraza up to 3.8.0 Cookie Parser cookies.go internal/cookies.ParseCookies input validation

October 9, 2026 Yanac

A vulnerability, which was classified as problematic, was found in CorazaWAF Coraza up to 3.8.0. This affects the function internal/cookies.ParseCookies of the file internal/cookies/cookies.go of the component Cookie Parser. Executing a manipulation can lead to improper input validation.

The identification of this vulnerability is CVE-2026-107835. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More