Nundina › Discover calendars › CISA Known Exploited Vulnerabilities calendar › CVE-2026-48710 - Kludex StarletteCVE-2026-48710 - Kludex Starlette2 September 2026Kludex Starlette HTTP Request/Response Smuggling Vulnerability. Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s...CISA Known Exploited Vulnerabilities calendarMore from this calendar

23 October 2026 - CVE-2026-110447 - Collabora Online – Built-in CODE Server

23 October 2026 - CVE-2026-114625 - Arista VeloCloud Orchestrator

20 October 2026 - CVE-2026-110936 - Siemens Software Center

20 October 2026 - CVE-2026-96652 - Plex Media Server

20 October 2026 - CVE-2026-96654 - Plex Media Server