CVE-2026-41409 | Apache MINA up to 2.0.27/2.1.10/2.2.5 AbstractIoBuffer.getObject deserialization

A vulnerability described as critical has been identified in Apache MINA up to 2.0.27/2.1.10/2.2.5. The impacted element is the function AbstractIoBuffer.getObject. The manipulation results in deserialization.

This vulnerability is cataloged as CVE-2026-41409. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.