PT-2026-32618

🗓️ 14 Apr 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 3 Views

Jetty HTTP/1.1 chunked extensions parsing flaw enables request smuggling when extensions are quoted.

Reporter	Title	Published	Views	Family All 328
FreeBSD	expat -- multiple vulnerabilities	31 Jan 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to SOLR and its dependencies (such as Jetty) affecting ODM-9.0.0 and older versions	19 Jun 202620:46	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (CVE-2026-2332)	16 Jun 202614:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues in Jetty	3 Jun 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	24 Jun 202606:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-1605, CVE-2026-29063, CVE-2025-11143, CVE-2026-2332, CVE-2025-15599, CVE-2026-0540)	27 Apr 202615:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by a HTTP Request/Response Smuggling Vulnerability in Eclipse Jetty (CVE-2026-2332)	19 Jun 202614:47	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Eclipse Jetty	11 Jun 202616:23	–	ibm
IBM Security Bulletins	Security Bulletin: AIX/VIOS Python is vulnerable to a null pointer dereference (CVE-2026-24515) and an integer overflow (CVE-2026-25210)	17 Mar 202622:03	–	ibm
IBM Security Bulletins	Security Bulletin: AIX/VIOS Perl is vulnerable to a null pointer dereference (CVE-2026-24515) and an integer overflow (CVE-2026-25210)	17 Mar 202622:04	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ROOT-APP-MAVEN-CVE-2026-2332
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RR82368.json
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-2332
suse	www.suse.com/security/cve/CVE-2026-2332
github	www.github.com/jetty/jetty.project
errata	www.errata.rockylinux.org/RLSA-2026:20568
twitter	www.twitter.com/_cvereports/status/2049068756341563685
osv	www.osv.dev/vulnerability/CVE-2026-25646
twitter	www.twitter.com/vuldb/status/2044379247301784055
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22695

11 Jun 2026 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.4 - 9.1

EPSS0.00523

SSVC

jetty chunked encoding request smuggling chunk extension