CVE-2026-19864 | Eclipse Jetty SessionAuthentication missing encryption

October 15, 2026 Yanac

A vulnerability identified as problematic has been detected in Eclipse Jetty. Affected by this issue is some unknown functionality of the component SessionAuthentication. Performing a manipulation results in missing encryption of sensitive data.

This vulnerability is reported as CVE-2026-19864. The attack requires a local approach. No exploit exists.VulDB Recent EntriesRead More