CVE-2026-76182

UNKNOWN 0.0

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when applied to the template becomes `index?p=/s&a=1`, which is interpreted as 2 query parameters: `p=/s` and `a=1`, rather than just one query parameter `p` whose value is `/s&a=1`.

CWE	CWE-74
Vendor	eclipse foundation
Product	eclipse jetty
Published	Oct 15, 2026

Stay Ahead of the Next One

Get instant alerts for eclipse foundation eclipse jetty

Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse jetty are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup