Skip to content
Heist/ feed
Medium

CVE-2026-76182

Type: advisorySource: Official CVE List1 source record

In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when applied to the template becomes `index?p=/s&a=1`, which is interpreted as 2 query parameters: `p=/s` and `a=1`, rather than just one query parameter `p` whose value is `/s&a=1`.

Announced Source revision 1
Original source ↗

CVE-2026-76182

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-76182

Eclipse Jetty

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Eclipse Jetty

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Eclipse Jetty

Source reference: /containers/cna/affected/2/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Eclipse Jetty

Source reference: /containers/cna/affected/3/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Eclipse Jetty

Source reference: /containers/cna/affected/4/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Eclipse Jetty

Source reference: /containers/cna/affected/5/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "Eclipse Foundation",
    "product": "Eclipse Jetty",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.0",
        "versionType": "semver",
        "lessThanOrEqual": "12.1.12"
      },
      {
        "status": "affected",
        "version": "12.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "12.0.38"
      }
    ],
    "packageName": "org.eclipse.jetty.ee10:jetty-ee10-fcgi-proxy",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Eclipse Foundation",
    "product": "Eclipse Jetty",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.0",
        "versionType": "semver",
        "lessThanOrEqual": "12.1.12"
      }
    ],
    "packageName": "org.eclipse.jetty.ee11:jetty-ee11-fcgi-proxy",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Eclipse Foundation",
    "product": "Eclipse Jetty",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.0",
        "versionType": "semver",
        "lessThanOrEqual": "12.1.12"
      },
      {
        "status": "affected",
        "version": "12.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "12.0.38"
      }
    ],
    "packageName": "org.eclipse.jetty.ee8:jetty-ee8-fcgi-proxy",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Eclipse Foundation",
    "product": "Eclipse Jetty",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.0",
        "versionType": "semver",
        "lessThanOrEqual": "12.1.12"
      },
      {
        "status": "affected",
        "version": "12.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "12.0.38"
      }
    ],
    "packageName": "org.eclipse.jetty.ee9:jetty-ee9-fcgi-proxy",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Eclipse Foundation",
    "product": "Eclipse Jetty",
    "versions": [
      {
        "status": "affected",
        "version": "11.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "11.0.32"
      },
      {
        "status": "affected",
        "version": "10.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "10.0.32"
      },
      {
        "status": "affected",
        "version": "9.4.0",
        "versionType": "semver",
        "lessThanOrEqual": "9.4.64"
      }
    ],
    "packageName": "org.eclipse.jetty.fcgi:fcgi-server",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Eclipse Foundation",
    "product": "Eclipse Jetty",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.0",
        "versionType": "semver",
        "lessThanOrEqual": "12.1.12"
      },
      {
        "status": "affected",
        "version": "12.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "12.0.38"
      }
    ],
    "packageName": "org.eclipse.jetty:jetty-server",
    "defaultStatus": "unaffected"
  }
]
Related CVEs
CVE-2026-76182

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#28775 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement