10 matches found
CLEANSTART-2026-VB68663 Security fixes in activemq 6.2.8-r1
Package activemq version 6.2.8-r1 fixes 16 vulnerabilities: CVE-2026-2332, CVE-2026-10050, CVE-2025-11143, CVE-2024-6763, ghsa-r7wm-3cxj-wff9...
Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in jetty-ee8-security jar (CVE-2026-10050)
Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-10050 reported for jetty-ee8-security-12.0.25.jar Vulnerability Details CVEID:CVE-2026-10050 DESCRIPTION: In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...
SUSE SLED15: jetty-continuation / jetty-http / jetty-io / jetty-security / etc (SUSE-SU-2026:3631-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3631-1 advisory. - CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution bsc1272393. Tenable...
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution bsc1272393. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
SUSE-SU-2026:3631-1 Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: - CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution bsc1272393...
DEBIAN-CVE-2026-10050
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...
CVE-2026-10050
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...
Linux Distros Unpatched Vulnerability : CVE-2026-10050
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specificati...
