Skip to content
Threat Feed
Subscribe

Product

Jetty Jetty-Security (11.0.0-11.0.26)

1 brief RSS
high advisory

Eclipse Jetty Digest Authentication Bypass via ISO-8859-1 Encoding Flaw (CVE-2026-10050)

A vulnerability, CVE-2026-10050, in Eclipse Jetty's HTTP client `DigestAuthentication.apply()` method allows an authentication bypass by an attacker who can exploit the lossy ISO-8859-1 character encoding to forge Digest authentication response hashes for users with non-Latin-1 passwords.

Jetty jetty-security +8 web-vulnerability authentication-bypass java jetty iso-8859-1 character-encoding cve
1t