CVE-2026-114101 — Coraza before 3.8.1 multipart filename* charset handling enables FILES rule bypass

Coraza versions before 3.8.1 may allow FILES-based rules to be bypassed because of how multipart upload filenames are processed.