CVE-2026-2332 | Eclipse Jetty up to 9.4.59/10.0.27/11.0.27/12.0.32/12.1.6 Double Quote request smuggling

A vulnerability identified as problematic has been detected in Eclipse Jetty up to 9.4.59/10.0.27/11.0.27/12.0.32/12.1.6. Affected by this issue is some unknown functionality of the component Double Quote Handler. Performing a manipulation results in http request smuggling.

This vulnerability was named CVE-2026-2332. The attack may be initiated remotely. There is no available exploit.