Search: “WAF”

6 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 211 Exploit / PoC 70 Data breach 67 Ransomware 53 Policy & legal 31 Industry 29 Malware 28 AI tools & infra 18 Phishing & fraud 18 Threat actor 11 Tools 8 Advisory 6 Research 3 AI safety & security 1

SeverityAll critical 293 high 98 medium 89 low 39 info 36

Content-Encoding WAF Evasion

FortiWeb WAF policies can be bypassed by unauthenticated attackers using crafted Content-Encoding requests (CVSS 4.8).

Fortinet disclosed an incomplete list of disallowed inputs (CWE-184) in FortiWeb's WAF, tracked as FG-IR-26-157. An unauthenticated attacker can bypass WAF policies using specifically crafted requests with crafted Content-Encoding values. The issue carries a CVSSv3 score of 4.8 and was revised on 2026-08-12. The advisory does not report active exploitation.

Fortinet PSIRTAug 12, 07:00 UTC · Aug 12, 2026Advisory

CISO challenges and the path to cutting edge security

Help Net SecurityDec 11, 00:00 UTC · Dec 11, 2018Advisory

Cymatic names Stuart McClure to its advisory board

Help Net SecurityOct 29, 00:00 UTC · Oct 29, 2020Advisory

Attackers still exploit Log4Shell on VMware Horizon servers, CISA warns

Help Net SecurityJun 24, 00:00 UTC · Jun 24, 2022Advisory in the wildCVE-2021-44228 CVE-2022-22954

CISA releases a scanner to identify web services affected by Apache Log4j flaws

Security AffairsDec 22, 22:10 UTC · Dec 22, 2021Advisory CVE-2021-44228 CVE-2021-45046 CVE-2021-45105

Taylor Lehman and Ira Winkler join Cymatic's advisory board

Help Net SecurityFeb 14, 00:00 UTC · Feb 14, 2020Advisory