Login Request a demo
PS
Product
Payara Server
by Payara · last CVE Sep 15, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 1Medium 1Low 0
Severity
All severities3Critical1High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Payara Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-28462
9.8
1%
Mar 30
A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 and newer (Community), when Java 1.8u181…
Affected: 4.1.2.191 through 5.0.0; 5.20.0 and later; 5.2020.1 and later
CVE-2026-12986
7.3
0%
Jun 24
A critical vulnerability in Admin GUI in Payara Server Full 4.x, 5.x, 6.x, 7.x, 7.2026.x, 6.2025.x, 6.2024.x on All platforms that allows the attacker to leak the admin…
Affected: 7.2025.1 before 7.2026.6; 7.0.0 before 7.1.0; 6.0.0 before 6.39.0; 5.20.0 before 5.88.0; 4.1.144 before 4.1.2.191.56; 5.181 through 5.201.2; +2 more
CVE-2026-92082
6.3
0%
Sep 15
Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attempts
Affected: 7.0.0 before 7.2.0; 7.2025.1 before 7.2026.7; 6.0.0 before 6.40.0; 5.20.0 before 5.89.0; 4.1.144 before 4.1.2.191.57; 6.2023.1; +1 more
Showing 3