Payara Server

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 4, 2026
Last mentionedSep 4, 2026

Timeline

2 articles · newest first

Payara 7.2026.1.RC1 Remote Code Execution via Server-Side Includes #exec Directive in Payara Server

Payara Server 7.2026.1.RC1 executes arbitrary OS commands when user-controlled Server-Side Includes #exec directives are passed to Runtime.exec without validation.

Full DisclosureSep 4, 00:13 UTC · Sep 4, 2026Vulnerability 2 sources1

Payara 7.2026.1.RC1 Arbitrary EJB Method Invocation via Insecure Reflection in Payara Server

Payara Server 7.2026.1.RC1 HTTP EJB endpoints rely on attacker-controlled reflection and JNDI lookups without authorization, enabling arbitrary EJB method invocation.

Full DisclosureSep 4, 00:13 UTC · Sep 4, 2026Vulnerability 2 sources1

Appears with

Payaravendor · 2

Entities are extracted by the model from each article. First seen Sep 4, 2026, last mentioned Sep 4, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.