{"vulnerability": "CVE-2026-12605", "sightings": [{"uuid": "c46fb523-ec9d-4ff7-8072-df6b2c0443df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgbm65koi2i", "content": "CVE-2026-12605\nEclipse GlassFish versions 8.0.x before 8.0.4 contain a security flaw that allows an attacker to steal the admin token, giving them full control of the server until the token expires. This can happen if a user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T14:42:06.200377Z"}, {"uuid": "ab6a2b59-bea4-4d12-970b-8b571404a8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12605", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msrn426pqz2u", "content": "\ud83d\udccc CVE-2026-12605 - In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-controlled h... https://www.cyberhub.blog/cves/CVE-2026-12605", "creation_timestamp": "2026-08-11T03:07:07.035798Z"}]}