CVE-2026-42778 | Apache MINA up to 2.1.11/2.2.6 AbstractIoBuffer.getObject deserialization

A vulnerability marked as critical has been reported in Apache MINA up to 2.1.11/2.2.6. The affected element is the function AbstractIoBuffer.getObject. This manipulation causes deserialization.

This vulnerability appears as CVE-2026-42778. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.