CVE-2026-74756 | Apache James up to 3.9.0 Webadmin missing authentication

November 6, 2026 Yanac

A vulnerability classified as critical was found in Apache James up to 3.9.0. The impacted element is an unknown function of the component Webadmin. Such manipulation leads to missing authentication.

This vulnerability is referenced as CVE-2026-74756. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More