Package · Maven

org.glassfish.main.admingui:admingui

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.6

CVE-2026-2587 Public exploit

GlassFish's gadget handler is vulnerable to RCE

A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression…

Eclipse Foundation Eclipse Glassfish org.glassfish.jsftemplating:jsftemplating org.glassfish.main.admingui:admingui Maven

May 19, 2026