CVE-2026-74756

Apache James docker-compose configurations expose the Webadmin REST API publicly by default without proper authentication setup. This vulnerability stems from insecure default initialization, where unprotected endpoints are accessible. To remediate this, Version 3.9.1 onward implements a fix by s...