CVE-2026-18660 — Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames
In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by…
Published: 2026-10-15 · CVSS: 8.8 · CVSS 4.0
In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7