Apache Mina Sshd (Apache Software Foundation) - vulnerabilities (CVEs)
17 CVEs, 8 in the last 30 days, 2 known versions, newest CVE from 2026-09-30. Vendor: Apache Software Foundation.
CVEs of Apache Mina Sshd
- CVE-2026-77185 - CVSS 9.1 (critical), 2026-09-30: Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH…
- CVE-2026-93994 - CVSS 8.1 (high), 2026-09-30: Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance…
- CVE-2026-94053 - CVSS 9.1 (critical), 2026-09-30: Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is…
- CVE-2026-93995 - CVSS 6.5 (medium), 2026-09-30: Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side…
- CVE-2026-93996 - CVSS 6.5 (medium), 2026-09-30: Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library…
- CVE-2026-94002 - CVSS 7.5 (high), 2026-09-30: Possible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5.…
- CVE-2026-94029 - CVSS 6.5 (medium), 2026-09-30: Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6…
- CVE-2026-94052 - CVSS 9.1 (critical), 2026-09-30: A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed…
- CVE-2026-56623 - CVSS 7.1 (high), 2026-07-20: Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server…
- CVE-2026-56624 - CVSS 7.3 (high), 2026-07-20: Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH…
- CVE-2026-58624 - CVSS 5.4 (medium), 2026-07-20: Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component…
- CVE-2026-56452 - CVSS 7.5 (high), 2026-07-20: Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. The implementation of…
- CVE-2026-48827 - CVSS 7.1 (high), 2026-06-01: Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations…
- CVE-2024-41909 - CVSS 5.9 (medium), 2024-08-12: Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795. An attacker that can intercept…
- CVE-2023-35887 - CVSS 5 (medium), 2023-07-10: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache…
- CVE-2022-45047 - CVSS 9.8 (critical), 2022-11-16: Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized…
- CVE-2021-30129 - CVSS 6.5 (medium), 2021-07-12: A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port…
