What’s Vulnerable › Products

Apache Software Foundation Apache MINA SSHD vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your Apache Software Foundation Apache MINA SSHD version is affected

Latest Apache Software Foundation Apache MINA SSHD vulnerabilities

• CVE-2026-94053 — Apache MINA SSHD: LDAP injection in sshd-ldap (CVSS 9.1)
• CVE-2026-94052 — Apache MINA SSHD: LDAP password authentication ineffective (CVSS 9.1)
• CVE-2026-94029 — Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension (CVSS 6.5)
• CVE-2026-94002 — Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies (CVSS 7.5)
• CVE-2026-93996 — Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read (CVSS 6.5)
• CVE-2026-93995 — Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server (CVSS 6.5)
• CVE-2026-93994 — Apache MINA SSHD: Repeated-publickey policy bypass on server (CVSS 8.1)
• CVE-2026-77185 — Apache MINA SSHD: Asynchronous authentication can bypass signature verification (CVSS 9.1)
• CVE-2026-58624 — Apache MINA SSHD: Remote execution of JGit commands can write files on the server (CVSS 5.4)
• CVE-2026-56624 — Apache MINA SSHD: SSH certificate options lack validations (CVSS 7.3)
• CVE-2026-56623 — Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows (CVSS 7.1)
• CVE-2026-56452 — Apache MINA SSHD: Path traversal in SCP file reception (CVSS 7.5)
• CVE-2026-48827 — Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git (CVSS 7.1)
• CVE-2024-41909 — Apache MINA SSHD: integrity check bypass (CVSS 5.9)
• CVE-2019-6111 — (CVSS 5.9)