What’s Vulnerable › Products

Payara Server vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Payara Server version is affected

Latest Payara Server vulnerabilities

• CVE-2026-92082 — Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attempts (CVSS 6.3)
• CVE-2026-12986 — (CVSS 7.3)
• CVE-2023-28462 — (CVSS 9.8)