--- cve: "CVE-2026-2332" severity: "HIGH" cvss: 7.4 epss: "1.2%" vendor: "Eclipse Foundation" kev: false exploited: false published: "2026-04-14 12:16:21" tags: [cve, security, high] source: tsecurity.de CVE-Dossier exported: "2026-09-11T14:42:13+02:00" --- # CVE-2026-2332 > 7.4 HIGH · đŸ§Ș PoC ## Beschreibung In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funky-chunks.html * https://w4ke.info/2025/10/29/funky-chunks-2.html Jetty terminates chunk extension parsing at \r\n inside quoted strings instead of treating this as an error. POST / HTTP/1.1 Host: localhost Transfer-Encoding: chunked 1;ext="val X 0 GET /smuggled HTTP/1.1 ... Note how the chunk extension does not close the double quotes, and it is able to inject a smuggled request. ## CVSS-Vektor ``` CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N ``` | Metrik | Wert | Bewertung | |---|---|---| | AV Angriffsvektor | Netzwerk | bad | | AC KomplexitĂ€t | Hoch | good | | PR Privilegien | Keine | bad | | UI Interaktion | Keine | bad | | S Scope | UnverĂ€ndert | good | | C Vertraulichkeit | Hoch | bad | | I IntegritĂ€t | Hoch | bad | | A VerfĂŒgbarkeit | Keine | good | ## Patch verfĂŒgbar (OSV) - 1bd927df90579c8e6420c8d59c4cdb152c4ae0c0 (Commit) - 8e2e9db9edceef93d37a63814ed06b921eb7f23d (Commit) ## Referenzen - - - - - - - - - - - - --- _Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-2332) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_