CVSS 4.0
6.3 mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/AU:Y/R:U/V:C/RE:L/U:AmberCVE-2026-92082
Medium (6.3). EPSS 0.3% chance of exploitation in the next 30 days.
By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
- CWE
- CWE-307
- Published
- Modified
- Record from
- the NVD, synced
References
- https://docs.azul.com/payara-community/release-notes/release-notes-7.2026.7.html
- https://docs.azul.com/payara/release-notes/release-notes-7.2.0.html
- https://docs.azul.com/payara/version/4/release-notes/release-notes-4.1.2.191.57.html
- https://docs.azul.com/payara/version/5/release-notes/release-notes-5.89.0.html
- https://docs.azul.com/payara/version/6/release-notes/release-notes-6.40.0.html