EIP-2026-102535

The exploit describes an information disclosure vulnerability in the Sun JavaMail API where insufficient validation of message number values allows authenticated attackers to access arbitrary emails. The provided URLs demonstrate the attack vector.