mina vulnerabilities and fixes

Recent CVEs affecting mina, with upgrade or downgrade steps. 4 tracked.

mina has 4 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-05-01. Highest priority: CVE-2026-42779 (score 64/100).

• CVE-2026-42779 CRITICAL 9.8 UPGRADE The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches
• CVE-2026-41635 CRITICAL 9.8 UPGRADE Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primit
• CVE-2026-42778 CRITICAL 9.8 UPGRADE The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches
• CVE-2026-41409 CRITICAL 9.8 UPGRADE The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete

FAQ

How do I fix mina vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mina being exploited right now?

None of the tracked mina CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mina CVE should I patch first?

CVE-2026-42779 currently ranks highest (64/100): The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches.

RSS feed for mina · ← Back to latest CVEs