CVE record · 3 sources
CVE-2026-48710
KEVKludex Starlette HTTP Request/Response Smuggling Vulnerability
- Vendor
- Kludex
- Product
- Starlette
- EPSS
- 1.00 (p100)
- CISA KEV
- listed
- Exposure class
- Developer platform, AI infrastructure, Collaboration
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the…
-
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette…
-
September 2026 CVE Landscape
In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.