Eclipse Jetty Digest Authentication Bypass via Character Substitution
CVE-2026-10050 is an authentication bypass vulnerability in Eclipse Jetty's Digest authentication implementation. The vulnerability arises from the use of ISO-8859-1 encoding, which replaces characters outside the Latin-1 range with '?' characters, leading to collisions in Digest authentication response hashes. This allows an attacker to bypass authentication for users with non-Latin-1 passwords.