Known vulnerabilities in Jetty 9.4.58.v20250814

Vendor: Eclipse
Software: Jetty
Version: 9.4.58.v20250814
Software CPE: cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Jetty version 9.4.58.v20250814 Jetty 9.4.58.v20250814 is affected by 4 vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137399 - Improper input validation
CVE-2026-6790
CWE-20 Medium
No
No
9.4.61, 10.0.29, 11.0.29, 12.0.35, 12.1.9 13.07.2026 SB2026071349
#VU137397 - Improper Handling of Alternate Encoding
CVE-2026-10050
CWE-173 High
No
No
9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 13.07.2026 SB2026071348
SB2026081819
SB2026083180
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332
CWE-444 Medium
No
No
12.0.33, 12.1.7 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 11 more
#VU123576 - Improper input validation
CVE-2025-11143
CWE-20 Low
No
No
12.0.31, 12.1.5 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 12 more