high · CVSS v3 7.5

CVE-2026-76171

In Apache James server prior version 3.9.1 improper validation in JMAP webPush SSRF validation did lead to the possibili…

Description

In Apache James server prior version 3.9.1 improper validation in JMAP webPush SSRF validation did lead to the possibility to reach internal addresses. Users are recommended to upgrade to version 3.9.1 which fixes this issue.

Scores

Severity
high
CVSS v2
6.4
CVSS v3
7.5
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

high

CVE-2026-123293

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting

View analysis

high

CVE-2026-123295

In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint

View analysis

high

CVE-2026-123297

In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow

View analysis