https://github.com/4ra1n
7 credited records · 7 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2026-19863No exploit | An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configureeclipse foundation · org.eclipse.jetty:jetty-ethereum · CWE-288 | Critical9.3 | — | 0.5% | Oct 15, 2026 |
27Monitor | CVE-2026-18662No exploit | In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same httpeclipse foundation · org.eclipse.jetty.ee11:jetty-ee11-servlet · CWE-863 | Medium6.9 | — | 0.3% | Oct 15, 2026 |
35Monitor | CVE-2026-18660No exploit | Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnameseclipse foundation · org.eclipse.jetty:jetty-server · CWE-178 | High8.8 | — | 0.3% | Oct 15, 2026 |
32Monitor | CVE-2026-77711No exploit | When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Requiredeclipse foundation · eclipse jetty · CWE-200 | High8.2 | — | 0.4% | Oct 15, 2026 |
32Monitor | CVE-2026-76184No exploit | In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the reclipse foundation · eclipse jetty · CWE-200 | High8.2 | — | 0.3% | Oct 15, 2026 |
27Monitor | CVE-2026-76182No exploit | In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, wheeclipse foundation · eclipse jetty · CWE-74 | Medium6.9 | — | 0.3% | Oct 15, 2026 |
35Monitor | CVE-2026-18661No exploit | In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rueclipse foundation · eclipse jetty · CWE-863 | High8.8 | — | 0.4% | Oct 15, 2026 |
- CVE-2026-1986337Monitor
An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configure
CriticalCVSS 9.3No exploitEPSS 0%eclipse foundation · org.eclipse.jetty:jetty-ethereumOct 15, 2026
- CVE-2026-1866227Monitor
In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http
MediumCVSS 6.9No exploitEPSS 0%eclipse foundation · org.eclipse.jetty.ee11:jetty-ee11-servletOct 15, 2026
- CVE-2026-1866035Monitor
Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames
HighCVSS 8.8No exploitEPSS 0%eclipse foundation · org.eclipse.jetty:jetty-serverOct 15, 2026
- CVE-2026-7771132Monitor
When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required
HighCVSS 8.2No exploitEPSS 0%eclipse foundation · eclipse jettyOct 15, 2026
- CVE-2026-7618432Monitor
In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the r
HighCVSS 8.2No exploitEPSS 0%eclipse foundation · eclipse jettyOct 15, 2026
- CVE-2026-7618227Monitor
In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, whe
MediumCVSS 6.9No exploitEPSS 0%eclipse foundation · eclipse jettyOct 15, 2026
- CVE-2026-1866135Monitor
In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern ru
HighCVSS 8.8No exploitEPSS 0%eclipse foundation · eclipse jettyOct 15, 2026