News · via oss-security
CVE-2026-49939: Apache James: Negative IMAP ACL administer authorization bypass through JMAP protocol
Posted by Benoit Tellier on Nov 06 Severity: moderate Affected versions: - Apache James 3.9.0 before 3.9.1 Description: In Apache James server prior version 3.9.1 improper Access Control List…