CVEvulnerability

CVE-2026-92082

6.3 MEDIUM Published 2026-09-15 Modified 2026-09-18 Official page ↗
Status
Deferred
Published
2026-09-15
Last modified
2026-09-18
Assigner
769c9ae7-73c3-4e47-ae19-903170fc3eb8
CVSS 4.0 (769c9ae7-73c3-4e47-ae19-903170fc3eb8)
6.3 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:L/U:Amber
Weaknesses
CWE-307

Description

By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see  https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .

Related

Weakness · CWE (1)

  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

References