Brute Force Vulnerability in Payara Server

CVE-2026-92082

What is CVE-2026-92082?

The Payara Server is susceptible to a brute force login vulnerability, as it does not impose a limit on failed login attempts by default. This can lead to attackers exploiting this weakness through repeated login attempts to gain unauthorized access. To address this concern, Payara Server offers automatic attack protection features that can be configured to enhance security. Detailed guidance on how to implement these configurations can be found in the official Payara Server security documentation.

References