MSRXMSRXSecurity
Vendors / Kludex

Kludex vulnerabilities being exploited

1 Kludex flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Starlette. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-09-02CVE-2026-48710 Starlette
Kludex Starlette HTTP Request/Response Smuggling Vulnerability

Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.

2026-09-16
Watch my Kludex softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.