Skip to content

Known vulnerabilities in Eclipse Foundation Eclipse Glassfish

Is your version affected?

CVE Summary Score Published
CVE-2026-12605 In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin… 9.6 Critical Aug 6, 2026
CVE-2026-2586 An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console 9.1 Critical May 19, 2026
CVE-2026-2587 A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used… 9.6 Critical May 19, 2026
CVE-2026-24457 An unsafe parsing of OpenMQ's configuration in OpenMQ… 9.1 Critical Mar 5, 2026

Other Eclipse Foundation products