Skip to content
Threat Feed
Subscribe

Product

Apache James (< 3.9.1)

1 brief RSS
low advisory

Apache James: WebAdmin REST API exposed without authentication (CVE-2026-74756)

A configuration vulnerability in Apache James default docker-compose files exposes the WebAdmin REST API to public access without authentication, enabling unauthorized administrative interaction.

Apache James webserver configuration-issue vulnerability
1c