NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-118636

CVSS: —
EPSS: —
Published: —
Modified: —

Analyze CVE-2026-118636 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

NVD CVE.org GitHub PoCs EPSS (—)

In the news

1 story

Apache MINA 3.0.0 through 3.0.0-M2 unsafe deserialization (CVE-2026-118636)

JavaNativeMessageDecoder calls ObjectInputStream.readObject() with no class filter; the issue was unsupported when assigned.

oss-security08:14 UTC · 6h agoVulnerabilityCVE-2026-118636

58