CVE-2026-104774 in Corazainfo

Prediction

by VulDB Data Team • 10/08/2026

A weakness has been identified in <a href="/product/coraza">Coraza up to 3.7.0</a>. Affected by this vulnerability is an unknown functionality of the file <em>internal/transformations/js_decode.go</em> of the component <em>jsDecode</em>. This manipulation causes off-by-one. Remote exploitation of the attack is possible.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Moderation

accepted

Entry

VDB-415526

CPE

CWE

CWE-193 (confirmed)

CVSS

5.3 (VulDB)

EPSS

0.00000

KEV

Activities

low

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-104774
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-104774
CVE Details	https://www.cvedetails.com/cve/CVE-2026-104774/

◂ Previous Overview Next ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!