https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T13:15:32.843950+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-14340 CVE-2025-14340 — Admin Account Takeover via malicious URL payload 2026-10-08T13:15:32.859788+00:00

Affected: Payara Platform Payara Server

Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator to change the admin password via URL Payload.