CVE-2026-75757: Unanchored Cookie Regex Lookupcve-2026-75757-unanchored-cookie-regex-lookup
Matching cookie names with an unanchored regular expression allows sibling subdomains or malicious actors to shadow cookies using prefixed cookie names (e.g., matching 'xname=' when searching for 'name='). Match cookie names with exact string equality or anchor with boundary delimiters such as '(?:^|;\\s*)'.
