Azul Payara vulnerabilities
We track 2 vulnerabilities in Azul Payara products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
2vulnerabilities
2critical
0high
0exploited
9.3average CVSS score
Latest Azul Payara vulnerabilities
- 9.3 Critical severity
Payara Server: Reliance on Untrusted Inputs in a Security Decision
A vulnerability in the GenericAdminAuthenticator component of Azul Payara Server and Azul Payara Micro allows a remote, unauthenticated attacker to bypass JMX/RMI administrative access restrictions by spoofing the client host address. Successful exploitation c
- 9.3 Critical severity
Payara Server: Authentication Bypass Using an Alternate Path or Channel
A vulnerability in the administration REST interface of Azul Payara allows a remote, unauthenticated attacker to bypass secure-admin remote-access restrictions by supplying an arbitrary value in the X-GlassFish-authToken HTTP header. The header's presence waiv