Skip to content
OpenAdvisories

Vendor

Payara

2 known vulnerabilities.

Products

Payara Server 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-12986

    Payara Server Full has a Cross-Site Request Forgery vulnerability

    A critical vulnerability in Admin GUI in Payara Server Full 4.x, 5.x, 6.x, 7.x, 7.2026.x, 6.2025.x, 6.2024.x on All platforms that allows the attacker to leak the admin gfresttoken to an attacker-controlled host that can result in a full unauthenticated takeo…

    Payara Payara Server fish.payara.distributions:payara Maven