PT-2026-32618

🗓️ 14 Apr 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

Jetty HTTP/1.1 chunked extensions parsing flaw enables request smuggling when extensions are quoted.

Reporter	Title	Published	Views	Family All 292
FreeBSD	jackson-databind -- multiple vulnerabilities	28 May 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher	13 Aug 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to SOLR and its dependencies (such as Jetty) affecting ODM-9.0.0 and older versions	19 Jun 202620:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs	12 Aug 202620:39	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (CVE-2026-2332)	16 Jun 202614:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues in Jetty	3 Jun 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind	29 Jul 202614:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-1605, CVE-2026-29063, CVE-2025-11143, CVE-2026-2332, CVE-2025-15599, CVE-2026-0540)	27 Apr 202615:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	28 Jul 202618:02	–	ibm
IBM Security Bulletins	Security Bulletin: Jackson databind security vulnerability in FileNet Content Manager reported for ACCE, GraphQL, External-Share	12 Aug 202612:45	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-27821
osv	www.osv.dev/vulnerability/ghsa-x44p-gvrj-pj2r
errata	www.errata.almalinux.org/9/ALSA-2026-20568.html
access	www.access.redhat.com/errata/RHSA-2026:60246
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-10532
osv	www.osv.dev/vulnerability/CVE-2026-22732
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-38820
osv	www.osv.dev/vulnerability/CVE-2024-47561
access	www.access.redhat.com/errata/RHSA-2026:20568
cve	www.cve.org/CVERecord

27 Aug 2026 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.4 - 9.1

EPSS0.01305

SSVC

jetty chunked encoding request smuggling chunk extension