CVE-2026-2587

A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression Language (EL) “expressions” are processed without proper sanitization or escaping. By injecting expressions such as #{7*7}, the server returns 49, confirming server-side EL evaluation. This issue allows a remote attacker to fully compromise the underlying host, enabling capabilities as reading/modifying data, executing arbitrary commands, persistence, and lateral movement. This issue affects Eclipse GlassFish: from 8.0.0 to 8.0.1, fixed in 8.0.2; 7.1.0, fixed in 7.1.1; from 7.0.0 to 7.0.25, fixed in 7.0.26. Impact on versions from 5.1.0 to 6.2.5 is unknown.

• CWE-917

• https://gitlab.eclipse.org/security/cve-assignment/-/issues/86Exploit, Issue Tracking, Third Party Advisory

Published

May 19, 2026

Last Modified

Jul 24, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25861QloApps through 1.7.0, fixed in commit 64e9722, contains a w…8.2
• CVE-2026-25863Conditional Fields for Contact Form 7 WordPress plugin throu…8.7
• CVE-2026-25865Punto Switcher through 4.5.0.583 contains an unquoted search…8.5
• CVE-2026-25866MobaXterm versions prior to 26.1 contain an uncontrolled sea…8.5
• CVE-2026-25868MiniGal Nano version 0.3.5 and prior contain a reflected cro…6.1
• CVE-2026-25869MiniGal Nano versions 0.3.5 and prior contain a path travers…7.5
• CVE-2026-25870DoraCMS version 3.1 and prior contains a server-side request…6.9
• CVE-2026-25872JUNG Smart Panel KNX firmware version L1.12.22 and prior con…6.9
• CVE-2026-25873OmniGen2-RL contains an unauthenticated remote code executio…9.8
• CVE-2026-25874LeRobot through 0.5.1 contains an unsafe deserialization vul…9.8
• CVE-2026-25875PlaciPy is a placement management system designed for educat…9.8
• CVE-2026-25876PlaciPy is a placement management system designed for educat…9.1