THREAT OPS › Threat News › [NVD] CVE-2026-10050 (CRITICAL 9.1) — In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes.
This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons.
If t
[NVD] CVE-2026-10050 (CRITICAL 9.1) — In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If t
CVE-2026-10050 CVSS: 9.1 CRITICAL Published: 2026-08-04T11:22:43.883
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes.
This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons.
If the password contains characters that cannot be rep
Indicators of compromise
- CVE-2026-10050cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-10050