{"schema":"vulnpedia.poc/1","cve":"CVE-2026-48710","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-09-02","ransomware":false},"epss":{"score":0.70288,"percentile":0.99379},"cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9d8edc626108","executable":false,"sourceId":"9d8edc626108","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9d8edc626108","modified":"2026-05-26T00:00:00Z","url":"https://vulncheck.com/xdb/9d8edc626108"}],"repositoryUrl":"https://github.com/CuteeCat/CVE-2026-48710"}],"poc_candidates":[{"url":"https://github.com/eris-ths/supply-chain-guard","source":"poc-in-github","sourceId":"CVE-2026-48710","description":"Detect, assess, and respond to supply chain attacks across npm/yarn and Python (pip/poetry/uv). Claude Code skill + standalone scripts. Built during axios RAT (2026-03-31) and Starlette BadHost CVE-2026-48710 (2026-05-22).","modified":"2026-07-02T08:59:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48710","url":"https://github.com/eris-ths/supply-chain-guard"},{"source":"poc-in-github","sourceId":"CVE-2026-48710","modified":"2026-07-02T08:59:49Z","url":"https://github.com/eris-ths/supply-chain-guard"}],"tags":[]},{"url":"https://github.com/xtremebeing/starlette-host-header-lab","source":"poc-in-github","sourceId":"CVE-2026-48710","description":"Starlette Host-Header URL Confusion Lab (X41-2026-002) - CVE-2026-48710","modified":"2026-05-27T10:00:25Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48710","url":"https://github.com/xtremebeing/starlette-host-header-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-48710","modified":"2026-05-27T10:00:25Z","url":"https://github.com/xtremebeing/starlette-host-header-lab"}],"tags":[]},{"url":"https://github.com/Bhanunamikaze/BadHost-CVE-2026-48710-Exploit","source":"poc-in-github","sourceId":"CVE-2026-48710","description":"Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI","modified":"2026-07-09T12:41:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48710","url":"https://github.com/Bhanunamikaze/BadHost-CVE-2026-48710-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-48710","modified":"2026-07-09T12:41:38Z","url":"https://github.com/Bhanunamikaze/BadHost-CVE-2026-48710-Exploit"}],"tags":[]},{"url":"https://github.com/sb-ox/repro-OXDEV-77637-uv-workspace","source":"poc-in-github","sourceId":"CVE-2026-48710","description":"OXDEV-77637 repro fixture: uv workspace whose transitive CVE (starlette 0.25.0 / CVE-2026-48710) is dropped when the lean clone omits workspace-member pyproject.toml. Tag: repro-OXDEV-77637","modified":"2026-08-03T16:25:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48710","url":"https://github.com/sb-ox/repro-OXDEV-77637-uv-workspace"},{"source":"poc-in-github","sourceId":"CVE-2026-48710","modified":"2026-08-03T16:25:41Z","url":"https://github.com/sb-ox/repro-OXDEV-77637-uv-workspace"}],"tags":[]},{"url":"https://github.com/CuteeCat/CVE-2026-48710","source":"poc-in-github","sourceId":"CVE-2026-48710","description":"CVE-2026-48710漏洞验证代码","modified":"2026-08-11T08:42:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-48710","url":"https://github.com/CuteeCat/CVE-2026-48710"},{"source":"poc-in-github","sourceId":"CVE-2026-48710","modified":"2026-08-11T08:42:36Z","url":"https://github.com/CuteeCat/CVE-2026-48710"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-48710 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-48710/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48710.yaml","template":"http/cves/2026/CVE-2026-48710.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-48710%22&type=repositories","executable":false}]}