Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5192 matches found

osv_ubuntu
osv_ubuntu•added 2026/07/14 9:16 a.m.•20 views

UBUNTU-CVE-2026-6790

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...

5.3CVSS6.1AI score0.0031EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve•added 2026/07/14 9:16 a.m.•32 views

CVE-2026-6790

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...

5.3CVSS6AI score0.0031EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve•added 2026/07/14 9:16 a.m.•30 views

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS7.1AI score0.0033EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu•added 2026/07/14 9:16 a.m.•24 views

UBUNTU-CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS7.1AI score0.0033EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu•added 2026/07/14 9:16 a.m.•29 views

UBUNTU-CVE-2026-10051

In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection. Subsequent request that do not have trailers report the trailers of the first request. Subsequent request that do have trailers report the...

7.5CVSS6.4AI score0.00429EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve•added 2026/07/14 9:16 a.m.•33 views

CVE-2026-10051

In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection. Subsequent request that do not have trailers report the trailers of the first request. Subsequent request that do have trailers report the...

7.5CVSS6.4AI score0.00429EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2026/07/14 8:56 a.m.•55 views

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS0.0033EPSS
SaveExploits1References1
osv_cve
osv_cve•added 2026/07/14 8:56 a.m.•20 views

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS5.9AI score
SaveExploits0References4
CVE
CVE•added 2026/07/14 8:56 a.m.•133 views

CVE-2026-8384

CVE-2026-8384 describes a URI normalization issue in the context of Eclipse Jetty: a crafted HTTP URI like "/public;/../admin/secret.txt" yields an unresolved path "/public/../admin/secret.txt" instead of the expected "/admin/secret.txt". Jetty itself remains unaffected, since it won’t serve secr...

5.3CVSS7.1AI score0.0033EPSS
SaveExploits1References1Affected Software1
Mend
Mend•added 2026/07/14 8:56 a.m.•6 views

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

6.9CVSS7.1AI score0.0033EPSS
SaveExploits1References11
attackerkb
attackerkb•added 2026/07/14 8:56 a.m.•20 views

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS7.2AI score0.0033EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment•added 2026/07/14 8:56 a.m.•29 views

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS7.1AI score0.0033EPSS
SaveExploits1References1
Debian CVE
Debian CVE•added 2026/07/14 8:56 a.m.•34 views

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS7.1AI score0.0033EPSS
SaveExploits1
osv_cve
osv_cve•added 2026/07/14 8:51 a.m.•31 views

CVE-2026-6790

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...

5.3CVSS6.1AI score
SaveExploits0References4
attackerkb
attackerkb•added 2026/07/14 8:51 a.m.•21 views

CVE-2026-6790

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...

5.3CVSS6.3AI score0.0031EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2026/07/14 8:51 a.m.•17 views

CVE-2026-6790

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...

5.3CVSS6.2AI score0.0031EPSS
SaveExploits0References1
Mend
Mend•added 2026/07/14 8:51 a.m.•4 views

CVE-2026-6790

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...

6.9CVSS6AI score0.0031EPSS
SaveExploits0References14
CVE
CVE•added 2026/07/14 8:51 a.m.•184 views

CVE-2026-6790

In Eclipse Jetty, HTTP/1 requests to HTTP/1.3 (HTTP/2/3 included) do not enforce that the request authority (host and port) matches the Host header when present. This mismatch can affect URI redirects, virtual host selection, reverse proxying, and logs. The issue is described across CVE sources (...

5.3CVSS6.2AI score0.0031EPSS
SaveExploits0References1Affected Software1
vulnersOsv
vulnersOsv•added 2026/07/14 8:51 a.m.•3 views

ai.agentscentral:agentj-jetty (>=0.0.4, <=0.0.6), app.cash.tempest:tempest-testing-jvm (>=1.4.0, <=2025.04.17.121601-f8f94b6) +1926 more potentially affected by CVE-2026-6790 via org.eclipse.jetty:jetty-server (>=12.0.0, <=12.0.34)

org.eclipse.jetty:jetty-server MAVEN version =12.0.0, =0.0.4, =1.4.0, =1.4.0, =7.0.0, =4.2.0, =2.1.2, =2.1.2, =2.1.2, =2.1.2, =2.1.2, =2.1.2, =2.1.2, =2.1.2, =2.1.2, =2.1.2, =2.1.21 and more Source cves: CVE-2026-6790 Source advisory: MEND:CVE-2026-6790...

5.3CVSS6AI score0.0031EPSS
SaveExploits0
Debian CVE
Debian CVE•added 2026/07/14 8:51 a.m.•29 views

CVE-2026-6790

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...

5.3CVSS6.1AI score0.0031EPSS
SaveExploits0
Rows per page
Query Builder