Critical 2 vendors · 3 advisories

CVE-2026-41635

Unified cross-vendor view: this CVE is referenced by 2 tracked vendors. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Apache2 advisories

Critical9.8Apache MINA: The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches.May 1, 2026
Critical9.8Apache MINA: Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive typ…Apr 27, 2026

Linux1 advisory

Critical9.8Arbitrary code execution via classname allowlist bypassApr 27, 2026