CLEANSTART-2026-YI69310 fix for CVE-2026-41409 was not applied to the 2

Security vulnerability affects the apache-nifi package. The fix for CVE-2026-41409 was not applied to the 2...

Security Bulletin: Security Vulnerability in Apache MINA affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-41409 CVE-2026-41635)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache MINA Vulnerability Details CVEID:CVE-2026-41409 DESCRIPTION: The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed...

Security Bulletin: Multiple Vulnerabilities in IBM DataStax Enterprise

Summary Multiple vulnerabilities were addressed in IBM DataStax Enterprise 6.9.22 Vulnerability Details CVEID:CVE-2026-41409 DESCRIPTION: The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied...

OESA-2026-2244 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...

OESA-2026-2245 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...

OESA-2026-2243 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...

OESA-2026-2242 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The fix for...

be.personify.iam:personify-provisioning (>=1.3.1.release, <=1.5.2.release), be.personify.iam:personify-scim-server (>=1.2.6.release, <=2.1.2.release) +493 more potentially affected by CVE-2026-41409 +1 more via org.apache.mina:mina-core (>=2.1.0, <=2.1.11)

org.apache.mina:mina-core MAVEN version =2.1.0, =1.3.1.release, =1.2.6.release, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =2.0.0, =2.0.0, =1.0.0, =3.3.0, =2.5.2.release,...

UBUNTU-CVE-2026-42778

The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a stat...

PT-2026-36314

Name of the Vulnerable Software and Affected Versions Apache MINA versions prior to 2.2.7 Apache MINA versions prior to 2.1.12 Description An issue exists in the Java network application framework due to flaws in the deserialization mechanism. The software deserializes data from unknown network...

asia.stampy:stampy-all (1.0-release), asia.stampy:stampy-examples (1.0-release) +2014 more potentially affected by CVE-2024-52046 +1 more via org.apache.mina:mina-core (>=2.0.0, <=2.0.27)

org.apache.mina:mina-core MAVEN version =2.0.0, =37.v0d3157c4aef8, =1.0.1.release, =1.1.8.release, =1.1.5.release, =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.0.2.release, =2.0.0, =1.0.7, =1.1.6, =1.6.8 - co.actioniq:scala-ssh-shell2.10 0.0.1-9045f42e1634ad6f74edf826b9c7c61d1a495a38 and mo...

asia.stampy:stampy-all (1.0-release), asia.stampy:stampy-examples (1.0-release) +2014 more potentially affected by CVE-2024-52046 +1 more via org.apache.mina:mina-core (>=2.0.0, <=2.0.27)

org.apache.mina:mina-core MAVEN version =2.0.0, =37.v0d3157c4aef8, =1.0.1.release, =1.1.8.release, =1.1.5.release, =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.0.2.release, =2.0.0, =1.0.7, =1.1.6, =1.6.8 - co.actioniq:scala-ssh-shell2.10 0.0.1-9045f42e1634ad6f74edf826b9c7c61d1a495a38 and mo...

be.personify.iam:personify-provisioning (>=1.3.1.release, <=1.5.2.release), be.personify.iam:personify-scim-server (>=1.2.6.release, <=2.1.2.release) +493 more potentially affected by CVE-2024-52046 +1 more via org.apache.mina:mina-core (>=2.1.0, <=2.1.10)

org.apache.mina:mina-core MAVEN version =2.1.0, =1.3.1.release, =1.2.6.release, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =2.0.0, =2.0.0, =1.0.0, =3.3.0, =2.5.2.release,...

asia.stampy:stampy-all (1.0-release), asia.stampy:stampy-examples (1.0-release) +2014 more potentially affected by CVE-2024-52046 +1 more via org.apache.mina:mina-core (>=2.0.0, <=2.0.27)

org.apache.mina:mina-core MAVEN version =2.0.0, =37.v0d3157c4aef8, =1.0.1.release, =1.1.8.release, =1.1.5.release, =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.0.2.release, =2.0.0, =1.0.7, =1.1.6, =1.6.8 - co.actioniq:scala-ssh-shell2.10 0.0.1-9045f42e1634ad6f74edf826b9c7c61d1a495a38 and mo...

CVE-2026-41409

The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed. Affected versions are Apache MINA 2.0.0 =...

CVE-2026-41409 Apache MINA: CWE-502 Deserialization of Untrusted Data

The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed. Affected versions are Apache MINA 2.0.0 =...

CVE-2026-41409

Apache MINA is affected by CVE-2026-41409 due to an incomplete fix for CVE-2024-52046 in AbstractIoBuffer.getObject(). The classname allowlist for deserialization was enforced too late after a class static initializer could already run. Affected versions: MINA 2.0.0–2.0.27, 2.1.0–2.1.10, 2.2.0–2....