CORS, or Cross-Origin Resource Sharing, is a browser security mechanism that controls whether a web page can make requests to a different origin. Servers can send CORS response headers specifying which origins, methods, headers, and credentials are allowed. CORS is primarily enforced by browsers and is not an authentication mechanism.