CVE-2026-48710CISA KEVEPSS p94.0%

CVE-2026-48710Kludex Starlette HTTP Request/Response Smuggling Vulnerability

Kludex / Starlette

Description

Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.

Scoring

CVSS 6.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS7.06% probability of exploitation · percentile 94.0% · 2026-10-05T12:00:23Z
Last modified2026-10-01

CISA KEV entry

Added to KEV: 2026-09-02

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-33768
CVE
CVE-2026-25545
CVE
CVE-2026-33131
CVE
CVE-2025-67647
CVE
CVE-2026-33808
CVE
CVE-2026-32847
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.