| CVE-2026-118636 |
**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls…
|
9.8
Critique
|
31 oct. 2026 |
| CVE-2026-94301 |
The fix for CVE-2026-47065/ZDRES-232 ("resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via…
|
9.8
Critique
|
21 sept. 2026 |
| CVE-2026-47065 |
ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully…
|
9.8
Critique
|
3 juin 2026 |
| CVE-2026-42778 |
The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches
|
9.8
Critique
|
1 mai 2026 |
| CVE-2026-42779 |
The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches
|
9.8
Critique
|
1 mai 2026 |
| CVE-2026-41409 |
The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete
|
9.8
Critique
|
27 avr. 2026 |
| CVE-2026-41635 |
Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types)…
|
9.8
Critique
|
27 avr. 2026 |
| CVE-2024-52046 |
The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized…
|
10.0
Critique
|
25 déc. 2024 |