CVE-2026-18660EPSS p22.8%

CVE-2026-18660CVE-2026-18660

Description

In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.

Scoring

EPSS0.32% probability of exploitation · percentile 22.8% · 2026-10-17T12:00:28Z
Last modified2026-10-15
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.