| CVE-2026-118636 |
**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls…
|
9.8
Critical
|
Oct 31, 2026 |
| CVE-2026-94301 |
The fix for CVE-2026-47065/ZDRES-232 ("resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via…
|
9.8
Critical
|
Sep 21, 2026 |
| CVE-2026-47065 |
ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully…
|
9.8
Critical
|
Jun 3, 2026 |
| CVE-2026-42778 |
The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches
|
9.8
Critical
|
May 1, 2026 |
| CVE-2026-42779 |
The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches
|
9.8
Critical
|
May 1, 2026 |
| CVE-2026-41409 |
The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete
|
9.8
Critical
|
Apr 27, 2026 |
| CVE-2026-41635 |
Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types)…
|
9.8
Critical
|
Apr 27, 2026 |
| CVE-2024-52046 |
The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized…
|
10.0
Critical
|
Dec 25, 2024 |