Findings

CVE-2026-76182

In Eclipse Jetty, and can be configured to forward requests to template URIs such as , where is the request path in context.

Published Oct 15, 2026 · updated Oct 15, 2026 · Eclipse Foundation Eclipse Jetty

In Eclipse Jetty, and can be configured to forward requests to template URIs such as , where is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of when applied to the template becomes , which is interpreted as 2 query parameters: and , rather than just one query parameter whose value is .

Timeline

Detection, updates, and resolution for this record.

  1. Oct 15, 2026 · NIST NVD

    Detected

    In Eclipse Jetty, and can be configured to forward requests to template URIs such as , where is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of when applied to the template becomes , which is interpreted as 2 query parameters: and , rather than just one query parameter whose value is .

Affected

  • vendor Eclipse Foundation Eclipse Jettyversion unspecified

Sources

  • CVE.orgCVE-2026-76182

    In Eclipse Jetty, and can be configured to forward requests to template URIs such as , where is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of when applied to the template becomes , which is interpreted as

    cve.org
  • NIST NVDCVE-2026-76182

    In Eclipse Jetty, and can be configured to forward requests to template URIs such as , where is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of `

    nvd.nist.gov

References

CVE-2026-76182 · ZeroDay Findings