6.5
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
BadHost — CVE-2026-48710 Scanner Detection-only scanner for the BadHost auth-bypass in Starlette / FastAPI — where auth middleware reads request.url.path instead of request.scope"path", allowing a crafted Host header to smuggle an allowlisted path and...
Basic Information
ID
2BD05E53-56D6-5376-821B-9F1C5CF31FD0
Published
May 28, 2026 at 09:57
Modified
May 28, 2026 at 09:59