Skip to content

CVE record · 1 source

CVE-2026-74756

Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup.

Vendor: Apache Software Foundation
Product: Apache James
Weakness: CWE-1188
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

20

CVE NVD 3h ago

Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup.

Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup. Version 3.9.1 onward sets a random credential by default on unprotected webadmin endpoints to prevent…

CVE-2026-74756 Apache Software Foundation