UNKNOWN NVD
CVE-2026-76171
In Apache James server prior version 3.9.1 improper validation in JMAP webPush SSRF validation did lead to the possibility to reach internal addresses. Users ar
In Apache James server prior version 3.9.1 improper validation in JMAP webPush SSRF validation did lead to the possibility to reach internal addresses.
Users are recommended to upgrade to version 3.9.1 which fixes this issue.
References
- https://lists.apache.org/thread.html/goj9xc05nbk1dp0z2g3r264j537lvx9r
- http://www.openwall.com/lists/oss-security/2026/11/06/17
- https://www.openwall.com/lists/oss-security/2026/11/06/17
This unknown severity vulnerability was published on 2026-11-06 via NVD.
vulnfeed aggregates 16326 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.