CVE-2026-92082 Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attempts

[
  {
    "vendor": "Payara",
    "product": "Payara Server",
    "packageName": "org.glassfish.admingui.common.security",
    "repo": "https://github.com/payara/Payara/",
    "modules": [
      "Admin GUI"
    ],
    "programFiles": [
      "org.glassfish.admingui.common.security.AdminConsoleAuthModule"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0",
        "lessThan": "7.2.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "7.2025.1",
        "lessThan": "7.2026.7",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.0.0",
        "lessThan": "6.40.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.20.0",
        "lessThan": "5.89.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.1.144",
        "lessThan": "4.1.2.191.57",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.2023.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "5.2020.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  }
]