Login Request a demo
MI
Product
Mina
by Apache · last CVE Jun 3, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 6High 1Medium 1Low 0
Severity
All severities8Critical6High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mina to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47065
9.8
1%
Jun 3
Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232
Affected: 2.0.29; 2.1.13; 2.2.8
CVE-2026-42778
9.8
1%
May 1
Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2)
Affected: 2.1.0 before 2.1.12; 2.2.0 before 2.2.7
CVE-2026-42779
9.8
1%
May 1
Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2)
Affected: 2.1.0 before 2.1.12; 2.2.0 before 2.2.7
CVE-2026-41409
9.8
0%
Apr 27
Apache MINA: CWE-502 Deserialization of Untrusted Data
Affected: 2.0.0 before 2.0.28; 2.1.0 before 2.1.11; 2.2.0 before 2.2.6
CVE-2026-41635
9.8
1%
Apr 27
Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE
Affected: 2.0.0 before 2.0.28; 2.1.0 before 2.1.11; 2.2.0 before 2.2.6
CVE-2024-52046
9.8
24%
Dec 25
Apache MINA: MINA applications using unbounded deserialization may allow RCE
Affected: 2.0.0 before 2.0.27; 2.1.0 before 2.1.10; 2.2.0 before 2.2.4
CVE-2019-0231
7.5
2%
Oct 1
Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear…
Affected: 2.0.20; 2.1.1
CVE-2021-41973
6.5
5%
Nov 1
In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely
Affected: before 2.0.22; 2.1.0 before 2.1.5
Showing 8