CVE-2026-19864

CVE-2026-19864 published: Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may consequently be writt...

View full NVD advisory → ← Back to CVE watch