CVE-2026-77711

The Jetty HttpClient component is vulnerable to a credential exposure flaw when making requests through a forward proxy . If a server responds with a 407 (Proxy Authentication Required) , the client mistakenly treats this response as originating from the proxy rather than the destination server. ...