Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitylow

Apache James WebAdmin exposed without authentication on official Docker default (CVE-2026-74756)

Original title: CVE-2026-74756: Apache James: WebAdmin exposed without authentication on official Docker default

oss-security ()
Read at seclists.org
AI summary · x-ai/grok-4.7Summaries by Vani AI

WebAdmin is exposed without authentication in the official Docker image for Apache James.

The WebAdmin interface in Apache James is exposed without authentication when using the official Docker default configuration.

Security assessment · AI, from the article

Impact: unauthenticated access to WebAdmin

Analyze CVE-2026-74756 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-74756
Tags
apachejamesdockerwebadminauthentication
Vendors
Apache
Products
Apache James

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-74756
Unauthenticated WebAdmin exposure in Apache James Docker
9.1—

From the original article

Posted by Benoit Tellier on Nov 06 Severity: low https://james. apache. org/...

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.