CVE-2026-76184

State: Published
Severity: 8.2 High
Published: Oct 15, 2026
Updated: Oct 15, 2026
Reserved: Aug 19, 2026

Description

In Eclipse Jetty, HttpClient may receive a redirect of the form:

```

/secure/../evil

```

If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizing the path to `/evil`, and will therefore follow the redirect sending the `Authorization` header for `/secure` to `/evil`.

This also mean that the attacker must have an evil application deployed on the same domain as the target.

Scores

CVSS	Score	Vector	Source
4.0	8.2 High	CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	eclipse

Weaknesses

CWE-200

Affected Products

Product	Versions
Eclipse JettyEclipse Foundation	12.1.0 through 12.1.12Affected 12.0.0 through 12.0.38Affected 11.0.0 through 11.0.32Affected 10.0.0 through 10.0.32Affected 9.4.0 through 9.4.64Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.