Question 1

What is CVE-2026-76171 — CVE-2026-76171?

Accepted Answer

In Apache James server prior version 3.9.1 improper validation in JMAP webPush SSRF validation did lead to the possibility to reach internal addresses. Users are recommended to upgrade to version 3.9.1 which fixes this issue.

Question 2

What is the authoritative source for CVE-2026-76171?

Accepted Answer

CVE-2026-76171 (CVE-2026-76171) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-76171CVE-2026-76171

Description

Scoring