{"total":1,"items":[{"id":171,"title":"CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability","original_title":"CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability","source_rating":null,"summary":"Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48710","type":"kev","language":"en","published_at":"2026-09-02T00:00:00+00:00","severity":"middel","priority":40,"vendors":["Kludex"],"cves":[{"id":"CVE-2026-48710","cvss":6.5,"epss":0.07056,"epss_percentile":0.94019,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":6.5,"epss_max":0.07056,"source_count":1,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null}]}