CLEANSTART-2026-VB68663 Security fixes in activemq 6.2.8-r1

Package activemq version 6.2.8-r1 fixes 16 vulnerabilities: CVE-2026-2332, CVE-2026-10050, CVE-2025-11143, CVE-2024-6763, ghsa-r7wm-3cxj-wff9...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in jetty-ee8-security jar (CVE-2026-10050)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-10050 reported for jetty-ee8-security-12.0.25.jar Vulnerability Details CVEID:CVE-2026-10050 DESCRIPTION: In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

SUSE SLED15: jetty-continuation / jetty-http / jetty-io / jetty-security / etc (SUSE-SU-2026:3631-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3631-1 advisory. - CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution bsc1272393. Tenable...

Security update for jetty-minimal

This update for jetty-minimal fixes the following issues: CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution bsc1272393. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2026:3631-1 Security update for jetty-minimal

This update for jetty-minimal fixes the following issues: - CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution bsc1272393...

DEBIAN-CVE-2026-10050

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...

CVE-2026-10050

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...

ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:repository-browser-plugin (>=1.0.0, <=1.0.1) +228 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.0.0, <=12.0.35)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.0.0, =0.0.1, =1.0.0, =2.0.3, =0.0.27, =0.0.22, =0.0.27, =2.6.0-rc1, =3.4.0, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =1.0.0, =2.11.0, =2.44.0 and more Source cves: CVE-2026-10050 Source advisory: MEND:CVE-2026-10050...

com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +88 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.9)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =5.0.1, =5.0.3-beta and more Source cves: CVE-2026-10050 Source advisory: MEND:CVE-2026-10050...

Linux Distros Unpatched Vulnerability : CVE-2026-10050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specificati...

CLEANSTART-2026-AB17721 Security fixes in solr 10.0.0-r6

Package solr version 10.0.0-r6 fixes 4 vulnerabilities: CVE-2026-8384, CVE-2026-6790, CVE-2026-10051, CVE-2026-10050...

CVE-2026-10050 vulnerabilities

Vulnerabilities for packages: trino, confluent-kafka, akhq, dependency-track, cloudwatch-exporter, druid, solr, neo4j, tez, apache-tika...

SUSE CVE-2026-10050

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...

CVE-2026-10050

creationtimestamp| type| source ---|---|--- 2026-07-23 00:35:03+00:00| published-proof-of-concept| https://github.com/jetty/jetty.project/security/advisories/GHSA-2fvj-hgj9-j2gr 2026-08-09 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msmm66wcux2o 2026-09-19 18:09:28+00:00|...

ai.pipestream:pipestream-wiremock-server (>=0.1.1, <=0.1.6), ai.timefold.solver:timefold-solver-service-maps-service-test (>=2.2.0, <=2.7.1) +1346 more potentially affected by CVE-2026-10050 via org.eclipse.jetty:jetty-security (>=11.0.0, <=11.0.26)

org.eclipse.jetty:jetty-security MAVEN version =11.0.0, =0.1.1, =2.2.0, =0.1.6, =4.0.0-beta.1, =0.1.0-rc, =3.24.1, =3.24.1, =3.24.1, =3.27.0, =3.27.0, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.6 and more Source cves: CVE-2026-10050 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-18230938...

ai.covia:covia-python-adapter (>=0.8.0, <=0.9.1), ai.covia:covia-sql (>=0.6.0, <=0.9.1) +1723 more potentially affected by CVE-2026-10050 via org.eclipse.jetty:jetty-security (>=12.1.0, <=12.1.9)

org.eclipse.jetty:jetty-security MAVEN version =12.1.0, =0.8.0, =0.6.0, =0.4.0, =0.4.0, =0.1.7, =4.13.5, =4.9.0, =2.2.3, =3.30.0, =3.30.0, =3.30.0, =3.30.0, =3.30.0, =3.30.0, =3.30.1 and more Source cves: CVE-2026-10050 Source advisory: GHSA-2FVJ-HGJ9-J2GR...

ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:repository-browser-plugin (>=1.0.0, <=1.0.1) +228 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.0.0, <=12.0.35)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.0.0, =0.0.1, =1.0.0, =2.0.3, =0.0.27, =0.0.22, =0.0.27, =2.6.0-rc1, =3.4.0, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =1.0.0, =2.11.0, =2.44.0 and more Source cves: CVE-2026-10050 Source advisory: GHSA-2FVJ-HGJ9-J2GR...

ai.covia:covia-python-adapter (>=0.8.0, <=0.9.1), ai.covia:covia-sql (>=0.6.0, <=0.9.1) +1723 more potentially affected by CVE-2026-10050 via org.eclipse.jetty:jetty-security (>=12.1.0, <=12.1.9)

org.eclipse.jetty:jetty-security MAVEN version =12.1.0, =0.8.0, =0.6.0, =0.4.0, =0.4.0, =0.1.7, =4.13.5, =4.9.0, =2.2.3, =3.30.0, =3.30.0, =3.30.0, =3.30.0, =3.30.0, =3.30.0, =3.30.1 and more Source cves: CVE-2026-10050 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-18230938...

CVE-2018-10050

iScripts eSwap v2.4 has SQL injection via the "registrationsettings.php" ddlFree parameter in the Admin Panel...

CVE-2020-10050

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts...