Sploitus

4 exploited vulnerabilities in Glassfish

Vulnerabilities with publicly known exploits

Vendors
Eclipse, Oracle, Sun
With known exploits
4
Affected Eclipse Glassfish versions
< 8.0.2
Affected Sun Java System Application Server versions
= 9.1_01, 9.1_02
Affected Oracle Glassfish Server versions
= 2.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2026-12605
2026-08-06FIX AVAILABLE
CVE-2026-2587 1 exploit
CVSS 9.6 CRITICAL 2026-05-19FIX AVAILABLE
CVE-2026-2586
CVSS 9.1 CRITICAL 2026-05-19
CVE-2008-5266 1 exploit
CVSS 4.3 MEDIUM 2008-11-28