CVE-2026-10050

Summary: CVE-2026-10050 affects Eclipse Jetty’s Digest authentication, where the server-side password encoding uses ISO-8859-1 by default. When characters cannot be represented in ISO-8859-1, they are replaced with “?”, enabling an attacker to submit a Digest header where a password of all “?” ch...