https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:27:38.386382+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-328521 EUVD-2026-328521 2026-10-07T15:27:38.446738+00:00 EUVD-2026-328521 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9342 fkie_cve-2024-9342 2026-10-07T15:27:38.446782+00:00

In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in https://glassfish.org/docs/latest/security-guide.html#brute-force-attack-protection .

 https://cve.radiocsirt.org/vuln/ghsa-99f7-hp6j-v6q4 GHSA-99f7-hp6j-v6q4 — Eclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attempts 2026-10-07T15:27:38.446818+00:00

Affected: Maven: org.glassfish.main.admingui:console-common

In Eclipse GlassFish version 7.0.16 or earlier, it is possible to perform login brute force attacks as there is no limitation on the number of failed login attempts.