CVE-2026-76171None▾ SunlitIn Apache James server prior version 3.9.1 improper validation in JMAP webPush SSRF validation did lead to the possibility to reach internal addresses. Users are recommended to upgrade to version 3.9.1 which fixes this issue.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In Apache James server prior version 3.9.1 improper validation in JMAP webPush SSRF validation did lead to the possibility to reach internal addresses. Users are recommended to upgrade to version 3.9.1 which fixes this issue.
apache_james >= 3.9.0 < 3.9.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-74756NoneApache James: WebAdmin exposed without authentication on official Docker default
CVE-2026-76168NoneApache James: ManageSieve file implementation cross-user path traversal
CVE-2026-85111High· 8.7Apache James: Denial of service upon MIME parsing
CVE-2026-49939NoneApache James: Negative IMAP ACL administer authorization bypass through JMAP protocol
CVE-2025-66621NoneApache James: SASL OAUTHBEARER do not validate aud in JWT payload if misconfigred
CVE-2025-68616High· 7.5WeasyPrint helps web developers to create PDF documents