Skip to content

Vulnerabilities of Apache Software Foundation Apache Mina SSHD

Is your version affected?

CVE Summary Score Published
CVE-2026-77185 Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain… 9.1 Critical Sep 30, 2026
CVE-2026-93994 Apache MINA SSHD is a Java library for client-side and server-side SSH 8.1 High Sep 30, 2026
CVE-2026-94053 Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and… 9.1 Critical Sep 30, 2026
CVE-2026-93995 Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 6.5 Medium Sep 30, 2026
CVE-2026-93996 Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 6.5 Medium Sep 30, 2026
CVE-2026-94002 Possible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0… 7.5 High Sep 30, 2026
CVE-2026-94029 Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in… 6.5 Medium Sep 30, 2026
CVE-2026-94052 A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or… 9.1 Critical Sep 30, 2026
CVE-2026-56623 Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and… 7.1 High Jul 20, 2026
CVE-2026-56624 Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side… 7.3 High Jul 20, 2026
CVE-2026-58624 Improper input validation in sshd-git in Apache MINA SSHD 5.4 Medium Jul 20, 2026
CVE-2026-56452 Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and… 7.5 High Jul 20, 2026
CVE-2026-48827 Path traversal vulnerability in Apache MINA SSHD bundle sshd-git 7.1 High Jun 1, 2026
CVE-2024-41909 Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as… Not rated Aug 12, 2024
CVE-2023-35887 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA 5.0 Medium Jul 10, 2023
CVE-2022-45047 Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA… Not rated Nov 16, 2022
CVE-2021-30129 A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error Not rated Jul 12, 2021

Other Apache Software Foundation products