AM
Product
Apache MINA SSHD
13
CVEs
0
On KEV
9.1
Max CVSS
8
New 30D
Severity mix
Critical 3High 6Medium 4Low 0
Watch
Add Apache MINA SSHD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77185 | 9.1 | Sep 30 | Apache MINA SSHD: Asynchronous authentication can bypass signature verification Affected: 2.0.0 before 2.20.0; 3.0.0-M1 before 3.0.0-M6 |
| CVE-2026-94053 | 9.1 | Sep 30 | Apache MINA SSHD: LDAP injection in sshd-ldap Affected: 1.2.0 before 2.20.0; 3.0.0-M1 before 3.0.0-M6 |
| CVE-2026-94052 | 9.1 | Sep 30 | Apache MINA SSHD: LDAP password authentication ineffective Affected: 1.2.0 before 2.20.0; 3.0.0-M1 before 3.0.0-M6 |
| CVE-2026-93994 | 8.1 | Sep 30 | Apache MINA SSHD: Repeated-publickey policy bypass on server Affected: before 2.20.0; 3.0.0-M1 before 3.0.0-M6 |
| CVE-2026-94002 | 7.5 | Sep 30 | Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies Affected: 0.9.0 before 2.20.0; 3.0.0-M1 before 3.0.0-M6 |
| CVE-2026-56452 | 7.5 | Jul 20 | Apache MINA SSHD: Path traversal in SCP file reception Affected: through 2.18.0; 3.0.0-M1 through 3.0.0-M4 |
| CVE-2026-56624 | 7.3 | Jul 20 | Apache MINA SSHD: SSH certificate options lack validations Affected: 2.0.0 through 2.18.0; 3.0.0-M1 through 3.0.0-M4 |
| CVE-2026-56623 | 7.1 | Jul 20 | Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows Affected: 2.0.0 through 2.18.0; 3.0.0-M1 through 3.0.0-M4 |
| CVE-2026-48827 | 7.1 | Jun 1 | Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git Affected: 2.0.0 through 2.17.1; 3.0.0-M1 through 3.0.0-M3 |
| CVE-2026-93995 | 6.5 | Sep 30 | Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server Affected: before 2.20.0; 3.0.0-M1 before 3.0.0-M6 |
| CVE-2026-93996 | 6.5 | Sep 30 | Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read Affected: before 2.20.0; 3.0.0-M1 before 3.0.0-M6 |
| CVE-2026-94029 | 6.5 | Sep 30 | Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension Affected: 1.0.0 before 2.20.0; 3.0.0-M1 before 3.0.0-M6 |
| CVE-2026-58624 | 5.4 | Jul 20 | Apache MINA SSHD: Remote execution of JGit commands can write files on the server Affected: 2.0.0 through 2.18.0; 3.0.0-M1 through 3.0.0-M4 |
Showing 13