HIGHVulnerability
Verified
Global

CISA KEV: Kludex Starlette — Kludex Starlette HTTP Request/Response Smuggling Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.

Analysis

Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-02. Remediation due: 2026-09-16.

Indicators of Compromise (2)

CVE (2)
CVE-2026-42271
NVDMITRE CVE
CVE-2026-48710
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 2, 2026. Verified by: CISA.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-101039 — A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this...

A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-101039
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-101038 — A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by ...

A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Parser. This manipulation causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond i

CVE-2026-101038
NIST NVD
MEDIUMVulnerability

New forms of intelligent money set to hit traditional bank B2B revenue streams

Stablecoins, tokenized deposits, and central bank digital currencies are projected to account for approximately four percent of global payments volume by 2030, diverting vast chunks of income from traditional bank revenue pools.

Finextra