CVE-2026-92082
By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .
Weakness
By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .
References
- https://docs.azul.com/payara-community/release-notes/release-notes-7.2026.7.html
- https://docs.azul.com/payara/release-notes/release-notes-7.2.0.html
- https://docs.azul.com/payara/version/4/release-notes/release-notes-4.1.2.191.57.html
- https://docs.azul.com/payara/version/5/release-notes/release-notes-5.89.0.html
- https://docs.azul.com/payara/version/6/release-notes/release-notes-6.40.0.html
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.