Login Request a demo
AM
Product
Apache MINA
by Apache Software Foundation · last CVE Sep 21, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 7High 1Medium 0Low 0
Severity
All severities8Critical7High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache MINA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-94301
9.8
0%
Sep 21
Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232
Affected: 2.0.0 before 2.0.31; 2.1.0 before 2.1.15
CVE-2026-47065
9.8
1%
Jun 3
Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232
Affected: 2.2.0 before 2.2.8; 2.1.0 before 2.1.13; 2.0.0 before 2.0.29
CVE-2026-42778
9.8
1%
May 1
Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2)
Affected: 2.2.X through 2.2.6; 2.1.X through 2.1.11
CVE-2026-42779
9.8
1%
May 1
Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2)
Affected: 2.2.X through 2.2.6; 2.1.X through 2.1.11
CVE-2026-41409
9.8
0%
Apr 27
Apache MINA: CWE-502 Deserialization of Untrusted Data
Affected: 2.2.0 through 2.2.5; 2.1.0 through 2.1.10; 2.0.0 through 2.0.27
CVE-2026-41635
9.8
1%
Apr 27
Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE
Affected: 2.2.0 through 2.2.5; 2.1.0 through 2.1.10; 2.0.0 through 2.0.27
CVE-2024-52046
9.8
24%
Dec 25
Apache MINA: MINA applications using unbounded deserialization may allow RCE
Affected: 2.1 through 2.1.9; 2.2 through 2.2.3
CVE-2026-47321
7.5
0%
Sep 21
Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate
Affected: 2.2.0 before 2.2.8; 2.1.0 before 2.1.13; 2.0.0 before 2.0.29
Showing 8