CVE-2026-48710

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 26, 2026

Last Seen

October 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild86.0

A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in Starlette. This exploit affects LiteLLM versions 1.74.2 to 1.83.6, with the U.S....

SonicWall SMA1000 Faces Critical Zero-Day Exploitation80.8

SonicWall disclosed two critical vulnerabilities in its SMA1000 series appliances, CVE-2026-83548 and CVE-2026-83549, which are being actively exploited. CVE-2026-83548 is a pre-authentication server-side request forgery (SSRF) vulnerability rated 10.0 on the CVSS scale, allowing unauthenticated att...

CISA Adds Seven Exploited Vulnerabilities; IBM Warns of Langflow OSS Flaws74.0

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities Catalog, including CVE-2026-9586, a SQL injection vulnerability in Sangoma Switchvox, and several others affecting SonicWall and JFrog products. These vulnerabilities pose significant risks due to active exploitation. Co...

Critical Security Bypass in Python-Starlette Affects Fedora 43 and 4472.0

A critical security vulnerability, CVE-2026-48710, has been identified in Python-Starlette, affecting Fedora 43 and 44. The flaw allows a security restriction bypass via a malformed HTTP Host header. Systems running these versions are at risk, as the vulnerability could enable unauthorized access. T...