CVE-2026-76171 | Apache James up to 3.9.0 JMAP server-side request forgery

November 6, 2026 Yanac

A vulnerability marked as critical has been reported in Apache James up to 3.9.0. This issue affects some unknown processing of the component JMAP. The manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-76171. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More