Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache MINA SSHD

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-77185

    Apache MINA SSHD: Asynchronous authentication can bypass signature verification

    Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server. Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of th…

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu
  • Critical 9.1
    CVE-2026-94053

    Apache MINA SSHD: LDAP injection in sshd-ldap

    Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support fo…

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu
  • Critical 9.1
    CVE-2026-94052

    Apache MINA SSHD: LDAP password authentication ineffective

    A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-…

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu
  • Critical 9.8
    CVE-2022-45047 Public exploit

    Apache MINA SSHD: Java unsafe deserialization vulnerability

    Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSH…

    Apache Software Foundation Apache MINA SSHD org.apache.sshd:sshd-core org.apache.sshd:sshd-common Maven