CVE-2026-92082 — Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attempts
By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server include…
Published: 2026-09-15 · CVSS: 6.3 · CVSS 4.0
By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7