Apache MINA Deserialization RCE Vulnerability

🗓️ 25 Dec 2024 12:30:45Reported by GitHub Advisory DatabaseType

Apache MINA vulnerability allows remote code execution via unsafe deserialization; upgrade necessary.

Reporter	Title	Published	Views	Family All 63
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (March 2025)	27 Mar 202516:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in org.apache.mina_mina-core affects IBM Db2 Data Management Console(CVE-2024-52046)	23 Jul 202520:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for April 2025 - Multiple CVEs addressed	7 May 202520:48	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of mina-core IBM My webMethods Server is vulnerable to Insecure Java Deserilization	23 Jun 202511:51	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the Use Apache MINA Core, IBM App Connect Professional is vulnerable to Remote Code Execution	15 Apr 202504:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in XStream and Apache MINA might affect IBM Storage Defender Copy Data Management.	16 May 202519:22	–	ibm
ATTACKERKB	CVE-2026-42778	1 May 202610:01	–	attackerkb
ATTACKERKB	CVE-2026-41409	27 Apr 202609:20	–	attackerkb
Chainguard	CVE-2024-52046 vulnerabilities	25 Dec 202410:15	–	cgr
Circl	CVE-2024-52046	25 Dec 202404:11	–	circl

Vulners

Node

org.apache.mina mina-coreRange2.0.0-M1–2.0.27maven

org.apache.mina mina-coreRange2.1.0–2.1.10maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-52046
lists	www.lists.apache.org/thread/4wxktgjpggdbto15d515wdctohb0qmv8
openwall	www.openwall.com/lists/oss-security/2024/12/25/1
security	www.security.netapp.com/advisory/ntap-20250103-0001
github	www.github.com/advisories/GHSA-76h9-2vwh-w278

11 Feb 2025 19:03Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8

CVSS 410

EPSS0.55384

SSVC