Advisories · Technology

Apache Software Foundation Apache MINA SSHD.

Every CVE that names Apache Software Foundation Apache MINA SSHD among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-77185 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Apache MINA SSHD: Asynchronous authentication can bypass signature verification
- Apache Software Foundation Apache MINA SSHD
- CWE-305
Not analysed yet 30 Sept 2026
CVE-2026-93994 CVE record

CVSS 8.1 High

Apache MINA SSHD: Repeated-publickey policy bypass on server
- Apache Software Foundation Apache MINA SSHD
- Authentication bypass
Not analysed yet 30 Sept 2026
CVE-2026-94053 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Apache MINA SSHD: LDAP injection in sshd-ldap
- Apache Software Foundation Apache MINA SSHD
- Other injection
- CWE-305
Not analysed yet 30 Sept 2026
CVE-2026-93995 CVE record

CVSS 6.5 Medium

Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server
- Apache Software Foundation Apache MINA SSHD
- CWE-20
Not analysed yet 30 Sept 2026
CVE-2026-93996 CVE record

CVSS 6.5 Medium

Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read
- Apache Software Foundation Apache MINA SSHD
- Denial of service
Not analysed yet 30 Sept 2026
CVE-2026-94002 CVE record

CVSS 7.5 High

Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies
- Apache Software Foundation Apache MINA SSHD
- Denial of service
Not analysed yet 30 Sept 2026
CVE-2026-94029 CVE record

CVSS 6.5 Medium

Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension
- Apache Software Foundation Apache MINA SSHD
- Denial of service
Not analysed yet 30 Sept 2026
CVE-2026-94052 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Apache MINA SSHD: LDAP password authentication ineffective
- Apache Software Foundation Apache MINA SSHD
- Authentication bypass
Not analysed yet 30 Sept 2026
CVE-2026-56623 CVE record

CVSS 7.1 High

Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows
- Apache Software Foundation Apache MINA SSHD
- Path traversal
Not analysed yet 20 Jul 2026
CVE-2026-56624 CVE record

CVSS 7.3 High

Apache MINA SSHD: SSH certificate options lack validations
- Apache Software Foundation Apache MINA SSHD
- Weak cryptography or TLS
Not analysed yet 20 Jul 2026
CVE-2026-58624 CVE record

CVSS 5.4 Medium

Apache MINA SSHD: Remote execution of JGit commands can write files on the server
- Apache Software Foundation Apache MINA SSHD
- CWE-20
Not analysed yet 20 Jul 2026
CVE-2026-56452 CVE record

CVSS 7.5 High

Apache MINA SSHD: Path traversal in SCP file reception
- Apache Software Foundation Apache MINA SSHD
- Path traversal
Not analysed yet 20 Jul 2026