Skip to contentPayara Platform Server vulnerabilities
- azul payara payara micro, payara server, payara platform micro +1 more +3 moreAzul Payara JMX/RMI Remote Authentication Bypass Leading to Remote Code Execution via GenericAdminAuthenticatorCVE-2026-909089.3 Critical
- payara platform server, azul payara payara server +1 moreAzul Payara Administration REST Interface Authentication Bypass via X-GlassFish-authToken Header Leading to Remote Code ExecutionCVE-2026-1100039.3 Critical
- payara serverPayara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attemptsCVE-2026-920826.3 Medium
- payara serverPayara Server Full has a Cross-Site Request Forgery vulnerabilityCVE-2026-12986Fix available7.3 High
- payara platform serverAdmin Account Takeover via malicious URL payloadCVE-2025-14340Public exploit7.3 High
- payara, payara platform server +1 moreCross-site Scripting (Stored)CVE-2025-15346.8 Medium
- payara platform micro, server +1 moreHTTP Server incorrectly accepting disallowed characters within header valuesCVE-2024-456872.4 Low
- payara, payara platform server +1 morePayload Injection Attack via Management REST interfaceCVE-2024-82158.7 High
- payara platform serverSensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST levelCVE-2024-80976.7 Medium
- payara, payara platform server +1 moreREST Interface Link Redirection via Host parameterCVE-2024-73127.0 High
- payara, payara platform server, micro and embedded +1 morePayara Platform: URL Redirection to untrusted site using FORM authenticationCVE-2023-416996.1 Medium