CVE-2026-42778

Name of the Vulnerable Software and Affected Versions Apache MINA versions prior to 2.2.7 Apache MINA versions prior to 2.1.12

Description An issue exists in the Java network application framework due to flaws in the deserialization mechanism. The software deserializes data from unknown network sources without proper validation. When a client sends specially crafted serialized Java objects, the system reconstructs these objects, which can allow a remote attacker to impact the confidentiality, integrity, and availability of protected information, potentially leading to remote code execution.

Recommendations Update to version 2.2.7. Update to version 2.1.12.