What’s Vulnerable › Products

Eclipse Foundation org.eclipse.jetty.ee9:jetty-ee9-security vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Eclipse Foundation org.eclipse.jetty.ee9:jetty-ee9-security version is affected

Latest Eclipse Foundation org.eclipse.jetty.ee9:jetty-ee9-security vulnerabilities

• CVE-2026-18662 — (CVSS 6.9)
• CVE-2026-18659 — Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring (CVSS 6.9)