CPE
Eclipse Vert.x contains a request smuggling vulnerability in its HTTP/1.x decoder (CVE-2026-102479) that can be leveraged for session fixation attacks.