WAF
Also called: web application firewall
Web application firewall: a filter in front of a website or API that inspects HTTP requests and blocks common attacks such as SQL injection and cross-site scripting. When a flaw cannot be fixed right away, WAF rules can block known ways of exploiting it in the meantime. It does not replace the fix, and its rules can be bypassed.
Further reading: owasp.org
Advisories that mention this term
Exploited Barracuda ESG auth bypass and root command injection flaws land on CISA KEV with Nov 13 deadline
Barracuda updated its advisory on November 9 to confirm that the authorization bypass CVE-2026-116606 and the command injection CVE-2026-111560 in Email Security Gateway have been exploited against a small number of organizations; chained, they give root on the device when the attacker can reach the admin interface .
PHP2Shell: Two Unauthenticated Remote Code Execution Vulnerabilities in PHP (CVSS 9.2); MODA Estimates ~28,000 Websites Affected in Taiwan
On October 21, PHP released security updates patching CVE-2026-109618 and CVE-2026-109619, two vulnerabilities with CVSS v4.
Semiconductor Wafer Maker GlobalWafers Issues Second Material Announcement on Cyberattack at Certain Plants, Confirming Production and Shipment Delays
According to iThome, following a cyberattack on some of its IT systems on June 12, semiconductor silicon wafer manufacturer GlobalWafers Co.
Semiconductor Firm Tekcon Electronics Hit by Cyberattack; Some IT Systems Affected and Recovery Ongoing
According to iThome, another Taiwanese semiconductor company has suffered a cyberattack: at 17:23 on Friday, May 17, TPEx-listed semiconductor firm Tekcon Electronics Corp.