BadHost - CVE-2026-48710 Starlette Host-Header Auth Bypass

- badhost.org

CVE-2026-48710 (BadHost): a critical Starlette vulnerability that lets attackers bypass authentication via Host header injection. Affects FastAPI, Starlette, vLLM, LiteLLM, MCP servers, and any Python ASGI app with path-based auth middleware.

CuteStat Rank Not Applicable $ 8.94


Nexelium

- nexeliumke.xyz

Nexelium is a leading technology company specializing in cybersecurity, ethical hacking, penetration testing, AI-powered solutions, software engineering, data science, web development, cloud computing, and digital forensics. We provide cutting-edge security intelligence, malware analysis, OSINT, network security, DevSe

CuteStat Rank Not Applicable $ 8.94