CWE-1289
54 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- 54Published CVEs54 of them scored
- 47Last 12 monthspublished in the last year
- 5Critical15 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-48710
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Kludex · starlette
ExploitedMedium6.5