PPayara

Products

Exploited and recent CVEs

• CVE-2026-92082 Medium 6.3 Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attempts 0.3%
• CVE-2026-12986 High 7.3 A critical vulnerability in Admin GUI in Payara Server Full 4.x, 5.x, 6.x, 7.x, 7.2026.x, 6.2025.x, 6.2024.x on All platforms that allows the attacker to leak the admin gfresttoken to an attacker-cont 0.3%