> Content-Encoding WAF Evasion
[DATE: 12/08/2026 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
4.8
An incomplete list of disallowed inputs [CWE-184] in FortiWeb WAF may allow an unauthenticated attacker to bypass policies via specifically crafted requests.
Revised on 2026-08-12 00:00:00