Skip to content

CVE record · 1 source

CVE-2026-118636

CVSS 9.8

UNSUPPORTED WHEN ASSIGNED JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class…

Vendor: Apache Software Foundation
Product: Apache MINA
CVSS v3.1: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-502

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

33

CVE NVD 11h ago

**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class…

**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an application that puts it in front of an untrusted peer is open to…

CVSS 9.8 CVE-2026-118636 Apache Software Foundation