CVE-2026-49939: Apache James JMAP ACL bypass
JMAP protocol fails to respect negative IMAP ACL rules, letting users administer folders despite denials; upgrade to 3.9.1 required.
1 stories, newest first · one card per story
JMAP protocol fails to respect negative IMAP ACL rules, letting users administer folders despite denials; upgrade to 3.9.1 required.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views