Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.
Read at CISA Known Exploited Vulnerabilities catalog
- Vendor
- Kludex
- Product
- Starlette
- CISA KEV
- listed
- Exploitation
- observed in the wild
- Fix
- available
- Exposure class
- Developer platform
Why it ranks 56 (Critical)
- CISA KEV listed
- Product class: developer platform
- Covered by 2 independent sources
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
- CVE-2026-48710 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.