Login Request a demo
EG
Product
Eclipse Glassfish
by Eclipse Foundation · last CVE Aug 6, 2026
4
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 3High 0Medium 1Low 0
Severity
All severities4Critical3High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Eclipse Glassfish to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-12605
9.6
0%
Aug 6
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-controlled host if the victim is…
Affected: 8.0.0 before 8.0.4
CVE-2026-2587
9.6
1%
May 19
A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler
Affected: 7.0.0 before 7.0.26; 7.1.0 before 7.1.1; 8.0.0 before 8.0.2
CVE-2026-2586
9.1
1%
May 19
An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console
Affected: 7.0.0 before 7.0.26; 7.1.0 before 7.1.1; 8.0.0 before 8.0.2
CVE-2026-12606
5.3
0%
Jul 14
Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveraged to perform HTTP request smuggling
Affected: 4.0.0 through 4.0.2; 5.0.0 before 5.0.2
Showing 4