CVE-2026-12605 | Eclipse GlassFish up to 8.0.3 DownloadServlet server-side request forgery

August 6, 2026 Yanac

A vulnerability was found in Eclipse GlassFish up to 8.0.3. It has been rated as problematic. This affects an unknown part of the component DownloadServlet. This manipulation causes server-side request forgery.

This vulnerability is registered as CVE-2026-12605. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More