CVE-2026-2586

An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish’s Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user.

More information : https://gitlab.eclipse.org/security/cve-assignment/-/issues/87