Linux Distros Unpatched Vulnerability : CVE-2026-19203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request...

CVE-2026-19203

A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling. This is caused by Jetty accepting a lone LF character as a terminator in parts of...

EUVD-2026-72718

A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling. This is caused by Jetty accepting a lone LF character as a terminator in parts of...

CVE-2026-19203

Eclipse Jetty is vulnerable to HTTP request smuggling due to acceptance of a lone LF character as a terminator in HTTP/1.1 chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, the misinterpretation may occur in chunk extensions, chunk data termination, or t...

PT-2026-87042

Name of the Vulnerable Software and Affected Versions Jetty affected versions not specified Description An issue exists where a client can send specially crafted HTTP/1.1 chunked requests that cause the server and an intermediary proxy to interpret request boundaries differently, potentially...