dinosn/CVE-2026-42779

PoC

CVE-2026-42779: Apache MINA AbstractIoBuffer.resolveClass() deserialization filter bypass to RCE (CVSS 9.8)

view exploit source poc_in_githubauthor dinosnpublished 2026-05-02catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-42779US	—	1.23% (69th)	Exploit	2026-05-01
The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: Apache MINA's AbstractIoBuffer.resolveClass() contai…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.