UBUNTU-CVE-2026-94301

The fix for CVE-2026-47065/ZDRES-232 "resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy", released on 2026-06-02 and announced as "Fully addressed" in MINA 2.2.8, 2.1.13 and 2.0.29, was committed to the 2.2.X branch only. The 2.0.X and 2.1.X maintenance...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=37.v0d3157c4a_ef8, <=63.v7e87d06b_a_30c), com.github.zhkl0228:rp-server (>=1.0.16, <=2.1.0) +112 more potentially affected by CVE-2026-47065 +1 more via org.apache.mina:mina-core (>=2.0.27, <=2.0.30)

org.apache.mina:mina-core MAVEN version =2.0.27, =37.v0d3157c4aef8, =1.0.16, =1.2.7, =2.14.0, =2.14.0, =2.15.0, =2.14.0, =2.13.0, =2.13.0, =2.5.0, =8.0, =8.0, =2.14.0-138.v6341ee58e1df, =2.14.0-138.v6341ee58e1df, =2.14.0-143.v2b362fc39576 and more Source cves: CVE-2026-47065, CVE-2026-94301 Sourc...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Apache MINA vulnerabilities (USN-8465-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8465-1 advisory. It was discovered that Apache MINA lacked an acceptMatchers allowlist mechanism to restrict which classes could be deserialized. ...

USN-8465-1 mina2 vulnerabilities

It was discovered that Apache MINA lacked an acceptMatchers allowlist mechanism to restrict which classes could be deserialized. An attacker could use this to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2024-52046 It was discovered that Apache MINA'...

CVE-2026-47065

creationtimestamp| type| source ---|---|--- 2026-06-03 11:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf24u465g2o 2026-06-04 03:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngn33wfwh2l 2026-06-04 06:58:35+00:00| seen|...

be.personify.iam:personify-provisioning (>=1.3.1.release, <=1.5.2.release), be.personify.iam:personify-scim-server (>=1.2.6.release, <=2.1.2.release) +493 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (>=2.1.0, <=2.1.12)

org.apache.mina:mina-core MAVEN version =2.1.0, =1.3.1.release, =1.2.6.release, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =2.0.0, =2.0.0, =1.0.0, =3.3.0, =2.5.2.release,...