CVE-2026-12986
1 advisory.
Maven/fish.payara.distributions:payara CVE-2026-12986: high, EPSS 0.27%
Payara Server Full has a Cross-Site Request Forgery vulnerability
Action: Upgrade fish.payara.distributions:payara to 7.2026.6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 7.2026.6 | - |
Fixed versions
| 7.2026.6 |
Sources
- osv: GHSA-x939-7fq5-v9v6
- https://nvd.nist.gov/vuln/detail/CVE-2026-12986
- https://github.com/payara/Payara/pull/8229
- https://github.com/payara/Payara/commit/be83ab093692bafb09125323f3fdefaeab9cc398
- https://docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%207.2026.6.html
- https://github.com/payara/Payara
- https://github.com/payara/Payara/releases/tag/payara-server-7.2026.6
CVE-2026-12986 · published · modified · JSON