Apache MINA
- Software type
- Application framework
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/23/2026, Apache MINA recorded 2 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Apache MINA and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-94301Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232CVE-2026-47321Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflateCVE-2026-47065Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232CVE-2026-42778Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2)CVE-2026-42779Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2)| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-94301Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232 | Exploitation statusNot exploited | FixYes |
| SeverityCritical |
CVE-2026-47321Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate | Exploitation statusNot exploited | FixYes | Published09/21/2026 | SeverityHigh |
|---|
CVE-2026-47065Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232 | Exploitation statusNot exploited | FixYes | Published06/03/2026 | SeverityCritical |
|---|
CVE-2026-42778Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2) | Exploitation statusNot exploited | FixYes | Published05/01/2026 | SeverityCritical |
|---|
CVE-2026-42779Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2) | Exploitation statusNot exploited | FixYes | Published05/01/2026 | SeverityCritical |
|---|
CVE-2026-41409Apache MINA: CWE-502 Deserialization of Untrusted Data | Exploitation statusNot exploited | FixYes | Published04/27/2026 | SeverityCritical |
|---|
CVE-2026-41635Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE | Exploitation statusNot exploited | FixYes | Published04/27/2026 | SeverityCritical |
|---|
CVE-2024-52046Apache MINA: MINA applications using unbounded deserialization may allow RCE | Exploitation statusNot exploited | FixYes | Published12/25/2024 | SeverityCritical |
|---|
CVE-2021-41973Apache MINA HTTP listener DOS | Exploitation statusNot confirmed | FixYes | Published11/01/2021 | SeverityUnknown |
|---|
CVE-2019-0231Apache MINA SSLFilter security Issue | Exploitation statusNot confirmed | FixNo | Published10/01/2019 | SeverityUnknown |
|---|
10 Results | Page 1 of 1