GHSA-96v6-hq43-x9h4

ghsaUSosv

GlassFish's Administration Console is Vulnerable to RCE

Advisory ansehen veröffentlicht 2026-05-19Lizenz: CC-BY-4.0

An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-2586US	—	0.84% (58th)	Exploit	2026-05-19
An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allo…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://github.com/eclipse-ee4j/glassfishPACKAGE
https://github.com/eclipse-ee4j/glassfish/releases/tag/8.0.2WEB
https://gitlab.eclipse.org/security/cve-assignment/-/issues/87WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-2586ADVISORY

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan