What’s Vulnerable › Products

Apache Software Foundation Apache MINA vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Apache Software Foundation Apache MINA version is affected

Latest Apache Software Foundation Apache MINA vulnerabilities

• CVE-2026-94301 — Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232 (CVSS 9.8)
• CVE-2026-47321 — Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate (CVSS 7.5)
• CVE-2026-47065 — Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232 (CVSS 9.8)
• CVE-2026-42779 — Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2) (CVSS 9.8)
• CVE-2026-42778 — Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2) (CVSS 9.8)
• CVE-2026-41409 — Apache MINA: CWE-502 Deserialization of Untrusted Data (CVSS 9.8)
• CVE-2026-41635 — Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (CVSS 9.8)
• CVE-2024-52046 — Apache MINA: MINA applications using unbounded deserialization may allow RCE (CVSS 9.8)
• CVE-2021-41973 — Apache MINA HTTP listener DOS (CVSS 6.5)
• CVE-2019-0231 — Apache MINA SSLFilter security Issue (CVSS 7.5)