VendorsApacheminaall versions
Vulnerabilities

Apache Mina

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2024-52046
Apache MINA: MINA applications using unbounded deserialization may allow RCE
Published 2024-12-25 · Modified
10.0EPSS 0.239
CVE-2026-41635
Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE
Published 2026-04-27 · Analyzed
9.8EPSS 0.008
CVE-2026-42779
Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2)
Published 2026-05-01 · Analyzed
9.8EPSS 0.008
CVE-2026-47065
Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232
Published 2026-06-03 · Analyzed
9.8EPSS 0.008
CVE-2026-41409
Apache MINA: CWE-502 Deserialization of Untrusted Data
Published 2026-04-27 · Analyzed
9.8EPSS 0.008
CVE-2026-42778
Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2)
Published 2026-05-01 · Analyzed
9.8EPSS 0.008
CVE-2019-0231
Apache MINA SSLFilter security Issue
Published 2019-10-01 · Modified
7.5EPSS 0.021
CVE-2021-41973
Apache MINA HTTP listener DOS
Published 2021-11-01 · Modified
6.5EPSS 0.046