Do Son Two ModSecurity vulnerabilities let attackers slip past WAF rules via a multipart parser bug (CVE-2026-52747). Update to ModSecurity v3.0.16 now.
Web Application Firewall
Fix critical Kemp LoadMaster flaws today. Learn how a command injection remote execution vulnerability leaves application networks exposed.
Fortinet released a critical patch for FortiWeb (CVE-2025-25257). This unauthenticated SQL injection flaw allows remote code execution. PoC Releases!
Fortinet released a critical patch for FortiWeb (CVE-2025-25257, CVSS 9.6). This unauthenticated SQL injection flaw allows remote code execution; update immediately!
Radware Cloud WAF has vulnerabilities (CVE-2024-56523, CVE-2024-56524) allowing attackers to bypass filtering via crafted HTTP requests and special characters.
Understand the implications of CVE-2025-27110 on web application security and how it may allow attacks to bypass defenses.
Hillstone Networks' Web Application Firewall (WAF) is at risk. Learn about the CVE-2024-8073 vulnerability and how to protect your system.