Apache Software Foundation Apache MINA SSHD
17 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-77185 | 2.0.0 – < 2.20.0 ; 3.0.0-M1 – < 3.0.0-M6 | Apache MINA SSHD: Asynchronous authentication can bypass signature verification | CRITICAL 9.1 | 0.4 % | ||
| CVE-2026-93994 | < 2.20.0 ; 3.0.0-M1 – < 3.0.0-M6 | Apache MINA SSHD: Repeated-publickey policy bypass on server | HIGH 8.1 | 0.3 % | ||
| CVE-2026-94053 | 1.2.0 – < 2.20.0 ; 3.0.0-M1 – < 3.0.0-M6 | Apache MINA SSHD: LDAP injection in sshd-ldap | CRITICAL 9.1 | 0.4 % | ||
| CVE-2026-93995 | < 2.20.0 ; 3.0.0-M1 – < 3.0.0-M6 | Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-93996 | < 2.20.0 ; 3.0.0-M1 – < 3.0.0-M6 | Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-94002 | 0.9.0 – < 2.20.0 ; 3.0.0-M1 – < 3.0.0-M6 | Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies | HIGH 7.5 | 0.4 % | ||
| CVE-2026-94029 | 1.0.0 – < 2.20.0 ; 3.0.0-M1 – < 3.0.0-M6 | Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-94052 | 1.2.0 – < 2.20.0 ; 3.0.0-M1 – < 3.0.0-M6 | Apache MINA SSHD: LDAP password authentication ineffective | CRITICAL 9.1 | 0.4 % | ||
| CVE-2026-56623 | 2.0.0 – 2.18.0 ; 3.0.0-M1 – 3.0.0-M4 | Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows | HIGH 7.1 | 0.9 % | ||
| CVE-2026-56624 | 2.0.0 – 2.18.0 ; 3.0.0-M1 – 3.0.0-M4 | Apache MINA SSHD: SSH certificate options lack validations | HIGH 7.3 | 0.3 % | ||
| CVE-2026-58624 | 2.0.0 – 2.18.0 ; 3.0.0-M1 – 3.0.0-M4 | Apache MINA SSHD: Remote execution of JGit commands can write files on the server | MEDIUM 5.4 | 0.6 % | ||
| CVE-2026-56452 | ≤ 2.18.0 ; 3.0.0-M1 – 3.0.0-M4 | Apache MINA SSHD: Path traversal in SCP file reception | HIGH 7.5 | 0.8 % | ||
| CVE-2026-48827 | 2.0.0 – 2.17.1 ; 3.0.0-M1 – 3.0.0-M3 | Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git | HIGH 7.1 | 0.5 % | ||
| CVE-2024-41909 | ≤ 2.11.0 | Apache MINA SSHD: integrity check bypass | MEDIUM 5.9 | 0.6 % | ||
| CVE-2023-35887 | 1.0 – < 2.10 | Apache MINA SSHD: Information disclosure bugs with RootedFilesystem | MEDIUM 5.0 | 1.3 % | ||
| CVE-2022-45047 | unspecified – 2.9.1 | Apache MINA SSHD: Java unsafe deserialization vulnerability | CRITICAL 9.8 | 3.8 % | ||
| CVE-2021-30129 | 2.0.0 – < Apache Mina SSHD* | DoS/OOM leak vulnerability in Apache Mina SSHD Server | MEDIUM 6.5 | 3.0 % |