Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache MINA SSHD

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-93995

    Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server

    Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though class GitPgmCommandFactory a …

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu
  • Medium 6.5
    CVE-2026-93996

    Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read

    Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component sshd-scp of Apache MINA SSHD provides a Java implementa…

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu
  • Medium 6.5
    CVE-2026-94029

    Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension

    Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name/check-file-handle extension. Apache MINA SSHD is a Java library for client-side and server-side SSH. Using a very s…

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu
  • Medium 5.4
    CVE-2026-58624

    Apache MINA SSHD: Remote execution of JGit commands can write files on the server

    Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such t…

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu
  • Medium 5.9
    CVE-2024-41909

    Apache MINA SSHD: integrity check bypass

    Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795. An attacker that can intercept traffic between client and server could drop certain packets from the stream, potentially causing client …

    Apache Software Foundation Apache MINA SSHD org.apache.sshd:sshd-common Maven
  • Medium 5.0
    CVE-2023-35887 Public exploit

    Apache MINA SSHD: Information disclosure bugs with RootedFilesystem

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" in…

    Apache Software Foundation Apache MINA SSHD org.apache.sshd:sshd-core org.apache.sshd:sshd-common Maven