CVE-2026-18660 - Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames
CVE ID :CVE-2026-18660 Published : Oct. 15, 2026, 10:17 a.m. | 1 hour, 16 minutes ago Description :In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case. ...