MEDIUM

CVE-2026-92082

2026-09-15 CVSS v4.0

CVSS

6.3

Description

By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .

Weakness (CWE)

CWE-307

EPSS Score

0.19%

Probability of exploitation in next 30 days

9.1th percentile

References

https://docs.azul.com/payara-community/release-notes/release-notes-7.2026.7.html https://docs.azul.com/payara/release-notes/release-notes-7.2.0.html https://docs.azul.com/payara/version/4/release-notes/release-notes-4.1.2.191.57.html https://docs.azul.com/payara/version/5/release-notes/release-notes-5.89.0.html https://docs.azul.com/payara/version/6/release-notes/release-notes-6.40.0.html

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE