Package · Maven

org.glassfish.jsftemplating:jsftemplating

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Critical 9.1

CVE-2026-2586 Public exploit

GlassFish's Administration Console is Vulnerable to RCE

An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of t…

Eclipse Foundation Eclipse Glassfish org.glassfish.main.admingui:console-common org.glassfish.jsftemplating:jsftemplating Maven

May 19, 2026
Critical 9.6

CVE-2026-2587 Public exploit

GlassFish's gadget handler is vulnerable to RCE

A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression…

Eclipse Foundation Eclipse Glassfish org.glassfish.jsftemplating:jsftemplating org.glassfish.main.admingui:admingui Maven

May 19, 2026