jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections

🗓️ 12 Aug 2026 19:35:14Reported by RedHatType

Eclipse Jetty retains HTTP/1.1 trailers across connections, leaking prior request data to subsequent requests.

Reporter	Title	Published	Views	Family All 70
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-10051, CVE-2026-6790, CVE-2026-8384, CVE-2026-10050, CVE-2026-59879, CVE-2026-59880)	14 Aug 202622:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1x) is affected by multiple vulnerabilities due to Eclipse Jetty	7 Aug 202611:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jetty-server jar (CVE-2026-10051, CVE-2026-6790)	27 Aug 202620:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BigMemory Max is affected by Jetty vulnerabilities that could allow unauthorized exposure to sensitive data	19 Aug 202614:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to Eclipse Jetty	26 Aug 202609:28	–	ibm
ATTACKERKB	CVE-2026-10051	14 Jul 202608:44	–	attackerkb
Chainguard	CVE-2026-10051 vulnerabilities	24 Jul 202608:24	–	cgr
Circl	CVE-2026-10051	20 Jul 202605:17	–	circl
CVE	CVE-2026-10051	14 Jul 202608:44	–	cve
Cvelist	CVE-2026-10051	14 Jul 202608:44	–	cvelist

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-10051
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
gitlab	www.gitlab.eclipse.org/security/cve-assignment/-/work_items/119
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-10051
cve	www.cve.org/CVERecord

27 Aug 2026 20:51Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.5

CVSS 46.9

EPSS0.00429

SSVC