Skip to content

#eclipse-foundation

2 articles

Security Alerts May 19, 2026

CVE-2026-2586: Authenticated RCE in Eclipse GlassFish Admin Console

An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of a...

Security Alerts May 19, 2026

CVE-2026-2587: Server-side EL injection RCE in Eclipse GlassFish

A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evalu...