New Apache MINA Vulnerabilities Open Door to Remote Code Execution Attacks
ID: d5e47f22-4993-503c-85c3-ac9bb8a1d03a
STIX ID: report--d5e47f22-4993-503c-85c3-ac9bb8a1d03a
Feed Name: GBHackers
Threat Score
The Apache MINA project released urgent patches for two critical deserialization vulnerabilities (CVE-2026-42778 and CVE-2026-42779) which can enable remote code execution when applications use AbstractIoBuffer.getObject(); users should upgrade to 2.1.12 or 2.2.7 and audit any code that deserializes client-supplied objects immediately.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.