EUVD-2026-118218

Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup. Version 3.9.1 onward sets a random credential by default on unprotected webadmin endpoints to prevent this while retain convenience...

CVE-2026-74756

Apache James docker-compose configurations expose the Webadmin REST API publicly by default without proper authentication setup. This vulnerability stems from insecure default initialization, where unprotected endpoints are accessible. To remediate this, Version 3.9.1 onward implements a fix by s...

CVE-2026-74756 Apache James: WebAdmin exposed without authentication on official Docker default

Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup. Version 3.9.1 onward sets a random credential by default on unprotected webadmin endpoints to prevent this while retain convenience...

CVE-2026-74756: Apache Software Foundation Apache James: Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper…

Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup. Version 3.9.1 onward sets a random credential by default on unprotected webadmin endpoints to prevent this while retain convenience...