Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Apache MINA — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Apache MINA, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE ID Title CVSS Severity Published
CVE-2026-94301 Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232 CWE-502 9.8 Critical 2026-09-21
CVE-2026-47321 Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate CWE-409 7.5 High 2026-09-21
CVE-2026-47065 Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232 CWE-502 9.8 Critical 2026-06-03
CVE-2026-42778 Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2) CWE-502 9.8 Critical 2026-05-01
CVE-2026-42779 Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2) CWE-502 9.8 Critical 2026-05-01
CVE-2026-41409 Apache MINA: CWE-502 Deserialization of Untrusted Data CWE-502 9.8 Critical 2026-04-27
CVE-2026-41635 Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE CWE-502 9.8 Critical 2026-04-27
CVE-2024-52046 Apache MINA: MINA applications using unbounded deserialization may allow RCE CWE-502 9.8 - 2024-12-25
CVE-2021-41973 Apache MINA HTTP listener DOS CWE-835 6.5 - 2021-11-01
CVE-2019-0231 Apache MINA SSLFilter security Issue 7.5 - 2019-10-01

All 10 known CVE vulnerabilities affecting Apache MINA with full Chinese analysis, references, and POCs where available.