What is CVE-2026-10050?
In Eclipse Jetty, the server-side Digest authentication encodes passwords into bytes using ISO-8859-1 charset, which may lead to unexpected behavior especially for passwords with special characters. Upgrading to the latest patched version is recommended to prevent authentication bypass issues.
Azərbaycanca: Eclipse Jetty server-də Digest autentifikasiya komponenti istifadəçi şifrələrini ISO-8859-1 kodlaması ilə byte-lara çevirir ki, bu da xüsusilə xüsusi simvollar (məsələn, 'ə', 'ü') olan şifrələr üçün gözlənilməz behavior yarada bilər. Problemi aradan qaldırmaq üçün məhsulu son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-287; shared vendor: Eclipse
FAQ1
What charset does Eclipse Jetty use to encode passwords in Digest authentication?
Eclipse Jetty uses ISO-8859-1 charset to encode passwords into bytes during Digest authentication, which may lead to unexpected behavior for passwords containing special characters.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.