Eclipse Glassfish

4 results · Clear filters · Feed

• Critical 9.6
  CVE-2026-12605

  In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfrest…

  Eclipse Foundation Eclipse Glassfish
  Aug 6, 2026
• Critical 9.1
  CVE-2026-2586 Public exploit

  GlassFish's Administration Console is Vulnerable to RCE

  An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of t…

  Eclipse Foundation Eclipse Glassfish org.glassfish.main.admingui:console-common org.glassfish.jsftemplating:jsftemplating Maven
  May 19, 2026
• Critical 9.6
  CVE-2026-2587 Public exploit

  GlassFish's gadget handler is vulnerable to RCE

  A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression…

  Eclipse Foundation Eclipse Glassfish org.glassfish.jsftemplating:jsftemplating org.glassfish.main.admingui:admingui Maven
  May 19, 2026
• Critical 9.1
  CVE-2026-24457

  An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbi…

  Eclipse Foundation Eclipse Glassfish Eclipse OpenMQ
  Mar 5, 2026