CVE-2026-76184

UNKNOWN 0.0

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizing the path to `/evil`, and will therefore follow the redirect sending the `Authorization` header for `/secure` to `/evil`. This also mean that the attacker must have an evil application deployed on the same domain as the target.

CWE	CWE-200
Vendor	eclipse foundation
Product	eclipse jetty
Published	Oct 15, 2026

Stay Ahead of the Next One

Get instant alerts for eclipse foundation eclipse jetty

Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse jetty are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Eclipse Foundation / Eclipse Jetty

12.1.0 ≤ 12.1.12 12.0.0 ≤ 12.0.38 11.0.0 ≤ 11.0.32 10.0.0 ≤ 10.0.32 9.4.0 ≤ 9.4.64

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/jetty/jetty.project/security/advisories/GHSA-qfr2-43g5-g768 gitlab.eclipse.org: https://gitlab.eclipse.org/security/cve-assignment/-/work_items/236

Credits

https://github.com/4ra1n https://github.com/pyn3rd https://github.com/unam4