Security Advisory catalog CVE-2026-76182 CVE-2026-76182 Published
In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. Overview Affected History Connections
cve-program · CVE-2026-76182 Published org.eclipse.jetty.ee10:jetty-ee10-fcgi-proxy Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Eclipse Foundation",
"product": "Eclipse Jetty",
"packageName": "org.eclipse.jetty.ee10:jetty-ee10-fcgi-proxy",
"versions": [
{
"status": "affected",
"version": "12.1.0",
"lessThanOrEqual": "12.1.12",
"versionType": "semver"
},
{
"status": "affected",
"version": "12.0.0",
"lessThanOrEqual": "12.0.38",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
} org.eclipse.jetty.ee11:jetty-ee11-fcgi-proxy Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Eclipse Foundation",
"product": "Eclipse Jetty",
"packageName": "org.eclipse.jetty.ee11:jetty-ee11-fcgi-proxy",
"versions": [
{
"status": "affected",
"version": "12.1.0",
"lessThanOrEqual": "12.1.12",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
} org.eclipse.jetty.ee8:jetty-ee8-fcgi-proxy Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Eclipse Foundation",
"product": "Eclipse Jetty",
"packageName": "org.eclipse.jetty.ee8:jetty-ee8-fcgi-proxy",
"versions": [
{
"status": "affected",
"version": "12.1.0",
"lessThanOrEqual": "12.1.12",
"versionType": "semver"
},
{
"status": "affected",
"version": "12.0.0",
"lessThanOrEqual": "12.0.38",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
} org.eclipse.jetty.ee9:jetty-ee9-fcgi-proxy Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Eclipse Foundation",
"product": "Eclipse Jetty",
"packageName": "org.eclipse.jetty.ee9:jetty-ee9-fcgi-proxy",
"versions": [
{
"status": "affected",
"version": "12.1.0",
"lessThanOrEqual": "12.1.12",
"versionType": "semver"
},
{
"status": "affected",
"version": "12.0.0",
"lessThanOrEqual": "12.0.38",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
} org.eclipse.jetty.fcgi:fcgi-server Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Eclipse Foundation",
"product": "Eclipse Jetty",
"packageName": "org.eclipse.jetty.fcgi:fcgi-server",
"versions": [
{
"status": "affected",
"version": "11.0.0",
"lessThanOrEqual": "11.0.32",
"versionType": "semver"
},
{
"status": "affected",
"version": "10.0.0",
"lessThanOrEqual": "10.0.32",
"versionType": "semver"
},
{
"status": "affected",
"version": "9.4.0",
"lessThanOrEqual": "9.4.64",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
} org.eclipse.jetty:jetty-server Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Eclipse Foundation",
"product": "Eclipse Jetty",
"packageName": "org.eclipse.jetty:jetty-server",
"versions": [
{
"status": "affected",
"version": "12.1.0",
"lessThanOrEqual": "12.1.12",
"versionType": "semver"
},
{
"status": "affected",
"version": "12.0.0",
"lessThanOrEqual": "12.0.38",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
} Original source record · Cite this exact observation · Complete original publisher JSON