Skip to content
Threat Feed

Tag

Cve-2026-2332

2 briefs RSS
high advisory

Jetty HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Jetty is vulnerable to HTTP request smuggling due to improper parsing of quoted strings in HTTP/1.1 chunked transfer encoding extension values, potentially allowing attackers to inject arbitrary HTTP requests, poison caches, and bypass security controls.

request-smuggling jetty CVE-2026-2332 webserver
2r 1t 1c 2i
high advisory

Eclipse Jetty HTTP/1.1 Request Smuggling via Chunk Extensions (CVE-2026-2332)

Eclipse Jetty's HTTP/1.1 parser is vulnerable to request smuggling due to improper handling of chunk extensions, allowing attackers to inject malicious requests.

request-smuggling jetty cve-2026-2332 funky-chunks
2r 3t 1c 2i