Security Bulletin: IBM webMethods Integration Server uses third-party Apache MINA SSHD and Apache MINA Core libraries that are affected CVE-2026-56624

Summary IBM webMethods Integration Server uses third-party Apache MINA SSHD and Apache MINA Core libraries that are affected by CVE-2026-56624. Vulnerability Details CVEID:CVE-2026-56624 DESCRIPTION: Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java libra...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=37.v0d3157c4a_ef8, <=63.v7e87d06b_a_30c), com.github.zhkl0228:rp-server (>=1.0.16, <=2.1.0) +112 more potentially affected by CVE-2026-47065 +1 more via org.apache.mina:mina-core (>=2.0.27, <=2.0.30)

org.apache.mina:mina-core MAVEN version =2.0.27, =37.v0d3157c4aef8, =1.0.16, =1.2.7, =2.14.0, =2.14.0, =2.15.0, =2.14.0, =2.13.0, =2.13.0, =2.5.0, =8.0, =8.0, =2.14.0-138.v6341ee58e1df, =2.14.0-138.v6341ee58e1df, =2.14.0-143.v2b362fc39576 and more Source cves: CVE-2026-47065, CVE-2026-94301 Sourc...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.apache.mina:mina-core is a network application framework which helps users develop high performance and high scalability network applications easily. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the...

Security Bulletin: Insecure Deserialization Vulnerability in Mina Core Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-47065)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-47065 DESCRIPTION: ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully addressed...

Security Bulletin: MongoDB Enterprised Advanced affected by: Deserialization of Untrusted Data (CVE-2026-42778, CVE-2026-42779)

Summary There are vulnerabilities in mina-core-2.2.4.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-42778, CVE-2026-42779. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-42778 DESCRIPTION: The fix for CVE-2026-41409 was not applied to the 2.1.X...

Security Bulletin: MongoDB Enterprised Advanced affected by: Deserialization of Untrusted Data (CVE-2026-41409, CVE-2026-41635)

Summary There are vulnerabilities in mina-core-2.2.4.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-41409, CVE-2026-41635. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-41409 DESCRIPTION: The fix for CVE-2024-52046 in Apache MINA...

ROOT-APP-MAVEN-CVE-2019-0231 CVE-2019-0231 in io.root.org.apache.mina:mina-core - Patched by Root

Root has patched CVE-2019-0231 in the io.root.org.apache.mina:mina-core package for Root:Maven. Multiple fixed versions available...

be.personify.iam:personify-provisioning (>=1.3.1.release, <=1.5.2.release), be.personify.iam:personify-scim-server (>=1.2.6.release, <=2.1.2.release) +493 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (>=2.1.0, <=2.1.12)

org.apache.mina:mina-core MAVEN version =2.1.0, =1.3.1.release, =1.2.6.release, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =2.0.0, =2.0.0, =1.0.0, =3.3.0, =2.5.2.release,...

com.taobao.tair:tair-client (>=2.3.4, <=2.3.5), com.taobao.tair:tair3-client (3.0.1.14) +12 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.1.5)

org.apache.mina:mina-core MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - com.taobao.tair:tair-client =2.3.4, =2.3.4.4, =2.1.2, =2.1.8 - org.apache.mina:mina-example 1.1.5 -...

org.apache.mina:mina-example (1.0.10), org.apache.mina:mina-filter-codec-netty (1.0.10) +5 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.10)

org.apache.mina:mina-core MAVEN version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.10 - org.apache.mina:mina-filter-codec-netty 1.0.10 -...

asia.stampy:stampy-all (1.0-release), asia.stampy:stampy-examples (1.0-release) +2282 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (>=2.0.0-m1, <=2.0.28)

org.apache.mina:mina-core MAVEN version =2.0.0-m1, =37.v0d3157c4aef8, =1.0.1.release, =1.1.8.release, =1.1.5.release, =2.7.4.0, =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.0.2.release, =1.0.3.release - cn.javaboot:nacos-address 1.4.1 - cn.javaboot:nacos-console 1.4.1 -...

org.apache.camel:camel-mina (>=1.0.0, <=1.2.0), org.apache.directory.server:apacheds-kerberos-shared (>=1.0.2, <=1.5.0) +22 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.2)

org.apache.mina:mina-core MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.camel:camel-mina =1.0.0, =1.0.2, =1.0.2, =1.0.1, =1.0.1, =1.0.2, =1.0.1, =1.0.1, =1.0.2, =1.0.2,...

org.apache.mina:mina-example (1.0.7), org.apache.mina:mina-filter-codec-netty (1.0.7) +5 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.7)

org.apache.mina:mina-core MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.7 - org.apache.mina:mina-filter-codec-netty 1.0.7 -...

org.apache.camel:camel-amqp (1.3.0), org.apache.camel:camel-mina (1.3.0) +69 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.1.6)

org.apache.mina:mina-core MAVEN version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.camel:camel-amqp 1.3.0 - org.apache.camel:camel-mina 1.3.0 -...

org.apache.mina:mina-example (1.1.1), org.apache.mina:mina-filter-compression (1.1.1) +3 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.1.1)

org.apache.mina:mina-core MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.1.1 - org.apache.mina:mina-filter-compression 1.1.1 -...

ai.databand.azkaban:azkaban-web-server (3.18.0), com.alibaba:dubbo (>=2.0.10, <=2.6.0) +141 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.1.7)

org.apache.mina:mina-core MAVEN version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - ai.databand.azkaban:azkaban-web-server 3.18.0 - com.alibaba:dubbo =2.0.10, =2.6.1, =3.0.0.rc1, =3.0.0.rc1,...

asia.stampy:stampy-all (1.0-release), asia.stampy:stampy-examples (1.0-release) +2282 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (>=2.0.0-m1, <=2.0.28)

org.apache.mina:mina-core MAVEN version =2.0.0-m1, =37.v0d3157c4aef8, =1.0.1.release, =1.1.8.release, =1.1.5.release, =2.7.4.0, =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.0.2.release, =1.0.3.release - cn.javaboot:nacos-address 1.4.1 - cn.javaboot:nacos-console 1.4.1 -...

Deserialization of Untrusted Data

Overview org.apache.mina:mina-core is a network application framework which helps users develop high performance and high scalability network applications easily. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the resolveProxyClass function. An attacker...

ai.h2o:sparkling-water-core_2.11 (>=3.46.0.1-1-2.3, <=3.46.0.6-1-2.4), ai.h2o:sparkling-water-core_2.12 (>=3.46.0.1-1-3.0, <=3.46.0.6-1-3.5) +787 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (>=2.2.0, <=2.2.7)

org.apache.mina:mina-core MAVEN version =2.2.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =1.5.4.release, =0.0.2, =3.0.0, =1.0.9, =1.6.9, =1.2.5, =1.1.7, =1.2.8 and more Source cves: CVE-2026-47065 Sourc...

ai.databand.azkaban:azkaban-web-server (3.18.0), asia.stampy:stampy-all (1.0-release) +2530 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (>=1.0.0, <=2.0.28)

org.apache.mina:mina-core MAVEN version =1.0.0, =37.v0d3157c4aef8, =1.0.1.release, =1.1.8.release, =1.1.5.release, =2.7.4.0, =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.0.2.release, =1.0.3.release - cn.javaboot:nacos-address 1.4.1 - cn.javaboot:nacos-console 1.4.1 and more Source cves:...