org.glassfish.main.admingui:console-cluster-plugin (7.0.6), org.glassfish.main.admingui:console-common-full-plugin (7.0.6) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.6)

org.glassfish.main.admingui:console-common MAVEN version 7.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.6 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.5), org.glassfish.main.admingui:console-common-full-plugin (7.0.5) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.5)

org.glassfish.main.admingui:console-common MAVEN version 7.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.5 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.3), org.glassfish.main.admingui:console-common-full-plugin (7.0.3) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.3)

org.glassfish.main.admingui:console-common MAVEN version 7.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.3 -...

org.glassfish.main.admingui:console-cluster-plugin (6.2.1), org.glassfish.main.admingui:console-common-full-plugin (6.2.1) +9 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (6.2.1)

org.glassfish.main.admingui:console-common MAVEN version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.2.1 -...

org.glassfish.main.admingui:console-cluster-plugin (4.0-b72), org.glassfish.main.admingui:console-common-full-plugin (4.0-b72) +8 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (4.0-b72)

org.glassfish.main.admingui:console-common MAVEN version 4.0-b72 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.0-b72 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.22), org.glassfish.main.admingui:console-commandrecorder-plugin (7.0.22) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.22)

org.glassfish.main.admingui:console-common MAVEN version 7.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.22 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.14), org.glassfish.main.admingui:console-common-full-plugin (7.0.14) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.14)

org.glassfish.main.admingui:console-common MAVEN version 7.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.14 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.24), org.glassfish.main.admingui:console-commandrecorder-plugin (7.0.24) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.24)

org.glassfish.main.admingui:console-common MAVEN version 7.0.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.24 -...

GlassFish's Administration Console is Vulnerable to RCE

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user...

GHSA-96V6-HQ43-X9H4 GlassFish's Administration Console is Vulnerable to RCE

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user...

CVE-2026-2586

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user. This issue...

CVE-2026-2586

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user. This issue...

CVE-2026-2586

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user. This issue...

EUVD-2026-30939

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user...

CVE-2026-2586

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user. This issue...

CVE-2026-2586

CVE-2026-2586: An authenticated RCE in GlassFish Administration Console. A user with console access can send crafted requests to execute arbitrary OS commands with the privileges of the application service user. Affected: GlassFish Admin Console. Impact (per provided metrics): high confidentialit...

CVE-2026-2586

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user. This issue...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation

An improper input neutralization flaw has been discovered in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...