Mina
Apache · 8 CVEs
CVE-2026-47065
CRITICAL
Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232
Jun 3, 2026
CVE-2026-42778
CRITICAL
Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2)
May 1, 2026
CVE-2026-42779
CRITICAL
Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserializatio…
May 1, 2026
CVE-2026-41409
CRITICAL
Apache MINA: CWE-502 Deserialization of Untrusted Data
Apr 27, 2026
CVE-2026-41635
CRITICAL
Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserializatio…
Apr 27, 2026
CVE-2024-52046
CRITICAL
Apache MINA: MINA applications using unbounded deserialization may allow RCE
Dec 25, 2024
CVE-2021-41973
MEDIUM
Apache MINA HTTP listener DOS
Nov 1, 2021
CVE-2019-0231
HIGH
Apache MINA SSLFilter security Issue
Oct 1, 2019
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-47065 | Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232 | CRITICAL | 0.50% | Jun 3, 2026 |
| CVE-2026-42778 | Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2) | CRITICAL | 0.75% | May 1, 2026 |
| CVE-2026-42779 | Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2) | CRITICAL | 0.76% | May 1, 2026 |
| CVE-2026-41409 | Apache MINA: CWE-502 Deserialization of Untrusted Data | CRITICAL | 0.75% | Apr 27, 2026 |
| CVE-2026-41635 | Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE | CRITICAL | 0.82% | Apr 27, 2026 |
| CVE-2024-52046 | Apache MINA: MINA applications using unbounded deserialization may allow RCE | CRITICAL | 24.37% | Dec 25, 2024 |
| CVE-2021-41973 | Apache MINA HTTP listener DOS | MEDIUM | 4.63% | Nov 1, 2021 |
| CVE-2019-0231 | Apache MINA SSLFilter security Issue | HIGH | 2.13% | Oct 1, 2019 |
Showing 1 to 8 of 8 CVEs