CVE-2026-85111

UNKNOWN 0.0

Apache James: Denial of service upon MIME parsing

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. Users are recommended to upgrade to Apache James server 3.9.1 that relies on fixed MIME4J 0.8.15 which addresses the issue. See CVE-2026-85108 in Apache James MIME4J library.

CWE	CWE-770
Vendor	apache software foundation
Product	apache james
Published	Nov 6, 2026

Stay Ahead of the Next One

Get instant alerts for apache software foundation apache james

Be the first to know when new unknown vulnerabilities affecting apache software foundation apache james are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache Software Foundation / Apache James

0 < 3.9.1

Apache Software Foundation / Apache James

0 < 3.9.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

lists.apache.org: https://lists.apache.org/thread.html/j1bql696qvg935lp8zo0m626jp9n0h8q cve.org: https://www.cve.org/CVERecord?id=CVE-2026-85108

Credits

Mike Read