CVE-2026-18660: Affected product not specified by the source

Affected technology

Product not specified by the source · 12.1.0 through 12.1.11, 12.0.0 through 12.0.38
Eclipse Foundation

Product not specified by the source · 11.0.0 through 11.0.32, 10.0.0 through 10.0.32, 9.0.0 through 9.4.64
Eclipse Foundation

Description’s affected range: versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 8.8/10) rates confidentiality impact as high; integrity impact as low; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.