All 5 CVE vulnerabilities found in Apache MINA, with AI-generated Chinese analysis, references, and POCs.
Vendor: Apache Software Foundation
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-41409 | Apache MINA: CWE-502 Deserialization of Untrusted Data CWE-502 | 9.8 | Critical | 2026-04-27 |
| CVE-2026-41635 | Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE CWE-502 | 9.8 | Critical | 2026-04-27 |
| CVE-2024-52046 | Apache MINA: MINA applications using unbounded deserialization may allow RCE CWE-502 | 9.8 | - | 2024-12-25 |
| CVE-2021-41973 | Apache MINA HTTP listener DOS CWE-835 | 6.5 | - | 2021-11-01 |
| CVE-2019-0231 | Apache MINA SSLFilter security Issue | 7.5 | - | 2019-10-01 |
All 5 known CVE vulnerabilities affecting Apache MINA with full Chinese analysis, references, and POCs where available.