CVE-2026-92082
Severity not reportedBy default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks.
By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .
Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://docs.azul.com/payara-community/release-notes/release-notes-7.2026.7.html 769c9ae7-73c3-4e47-ae19-903170fc3eb8
- https://docs.azul.com/payara/release-notes/release-notes-7.2.0.html 769c9ae7-73c3-4e47-ae19-903170fc3eb8
- https://docs.azul.com/payara/version/4/release-notes/release-notes-4.1.2.191.57.html 769c9ae7-73c3-4e47-ae19-903170fc3eb8
- https://docs.azul.com/payara/version/5/release-notes/release-notes-5.89.0.html 769c9ae7-73c3-4e47-ae19-903170fc3eb8
- https://docs.azul.com/payara/version/6/release-notes/release-notes-6.40.0.html 769c9ae7-73c3-4e47-ae19-903170fc3eb8