Security researchers at Secwest and X41 D-Sec discovered CVE-2026-48710, a high-severity authentication bypass vulnerability in the Starlette Python web framework that allows attackers to use malforme…
A critical vulnerability tracked as CVE-2026-48710 and nicknamed "BadHost" was disclosed in the Starlette ASGI framework, affecting all versions prior to 1.0.1. The flaw allows attackers to manipulate…
A single-character bug in the Starlette open-source framework, tracked as CVE-2026-48710 and nicknamed BadHost, allowed attackers to bypass authentication on millions of servers running AI agents and …
A single malformed character in a web request can let an unauthenticated attacker bypass access controls in applications built on the Starlette framework, which powers FastAPI, researchers at cybersec…
A critical vulnerability in the open source Starlette framework, tracked as CVE-2026-48710 and named BadHost, exposes millions of AI agents and tools to potential data theft and credential compromise.…