Mehrere Schwachstellen (CVE-2026-1603, CVE-2026-2586, CVE-2026-2587, CVE-2026-41940, CVE-2026-42945, CVE-2026-8598, CVE-2026-8711) in Glassfish

Eclipse Foundation - Eclipse Glassfish - CRITICAL - CVE-2026-2586. An authenticated Remote Code Execution vulnerability exists in the Administration Console of GlassFish. This flaw allows authorized users to send specially crafted requests, potentially resulting in the execution of arbitrary commands on the operating system with the privileges of the application service user. This exposure could lead to unauthorized control over the server, highlighting the need for vigilance and secured access controls in deployment environments.
Quelle: securityvulnerability.io