CVE-2026-114062 in SvelteKitinfo

Summary

by MITRE • 10/21/2026

SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server, which redirects them to internal services.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

VulnCheck

Reservation

10/20/2026

Disclosure

10/21/2026

Moderation

accepted

EPSS

0.00000

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-114062
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-114062
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-114062/

◂ PreviousOverviewNext ▸

Want to know what is going to be exploited?

We predict KEV entries!