Apache Software Foundation Mina vulnerabilities

• apache software foundation mina Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder CVE-2026-118636 9.8 CriticalOctober 31, 2026
• apache software foundation mina sshd Apache MINA SSHD: Asynchronous authentication can bypass signature verification CVE-2026-77185 9.1 CriticalSeptember 30, 2026
• apache software foundation mina sshd Apache MINA SSHD: Repeated-publickey policy bypass on server CVE-2026-93994 Fix available 8.1 HighSeptember 30, 2026
• apache software foundation mina sshd Apache MINA SSHD: LDAP injection in sshd-ldap CVE-2026-94053 9.1 CriticalSeptember 30, 2026
• apache software foundation mina sshd Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server CVE-2026-93995 Fix available 6.5 MediumSeptember 30, 2026
• apache software foundation mina sshd Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read CVE-2026-93996 6.5 MediumSeptember 30, 2026
• apache software foundation mina sshd Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies CVE-2026-94002 7.5 HighSeptember 30, 2026
• apache software foundation mina sshd Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension CVE-2026-94029 6.5 MediumSeptember 30, 2026
• apache software foundation mina sshd Apache MINA SSHD: LDAP password authentication ineffective CVE-2026-94052 9.1 CriticalSeptember 30, 2026
• apache software foundation mina Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232 CVE-2026-94301 9.8 CriticalSeptember 21, 2026
• apache software foundation mina Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate CVE-2026-47321 Fix available 7.5 HighSeptember 21, 2026
• apache mina sshd Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows CVE-2026-56623 7.1 HighJuly 20, 2026
• apache mina sshd Apache MINA SSHD: SSH certificate options lack validations CVE-2026-56624 7.3 HighJuly 20, 2026
• apache mina sshd Apache MINA SSHD: Remote execution of JGit commands can write files on the server CVE-2026-58624 5.4 MediumJuly 20, 2026
• apache mina sshd Apache MINA SSHD: Path traversal in SCP file reception CVE-2026-56452 7.5 HighJuly 20, 2026
• apache mina Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232 CVE-2026-47065 Fix available 9.8 CriticalJune 3, 2026
• apache mina sshd Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git CVE-2026-48827 Fix available 7.1 HighJune 1, 2026
• apache mina Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2) CVE-2026-42778 Public exploitFix available 9.8 CriticalMay 1, 2026
• apache mina Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2) CVE-2026-42779 Public exploitFix available 9.8 CriticalMay 1, 2026
• apache mina Apache MINA: CWE-502 Deserialization of Untrusted Data CVE-2026-41409 Fix available 9.8 CriticalApril 27, 2026
• apache mina Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE CVE-2026-41635 Fix available 9.8 CriticalApril 27, 2026
• apache mina Apache MINA: MINA applications using unbounded deserialization may allow RCE CVE-2024-52046 Fix available EPSS 24.6% 10.0 CriticalDecember 25, 2024
• apache mina sshd Apache MINA SSHD: integrity check bypass CVE-2024-41909 Fix available 5.9 MediumAugust 12, 2024
• apache sshd, apache software foundation mina sshd +1 more Apache MINA SSHD: Information disclosure bugs with RootedFilesystem CVE-2023-35887 Public exploitFix available 5.0 MediumJuly 10, 2023
• apache sshd, apache software foundation mina sshd +1 more Apache MINA SSHD: Java unsafe deserialization vulnerability CVE-2022-45047 Public exploitFix available 9.8 CriticalNovember 16, 2022
• apache mina, oracle banking payments, banking trade finance process management +6 more +8 more Apache MINA HTTP listener DOS CVE-2021-41973 Fix available 6.5 MediumNovember 1, 2021
• apache sshd, apache software foundation mina sshd, oracle banking payments +7 more +9 more DoS/OOM leak vulnerability in Apache Mina SSHD Server CVE-2021-30129 Fix available 6.5 MediumJuly 12, 2021
• apache mina Apache MINA SSLFilter security Issue CVE-2019-0231 Fix available 7.5 HighOctober 1, 2019