Critical, High-Severity Vulnerabilities Patched in Apache MINA, HTTP Server
Source SecurityWeek
Mentioned vulnerabilities
Rated High by SecurityWeek
Data as of 6 May 2026, 02:39 UTC
What to do
AI-suggested
Apache has released official patches in HTTP Server version 2.4.67 and MINA versions 2.2.7 and 2.1.12 that address these vulnerabilities. Organizations should promptly upgrade to these patched versions. Additionally, for Apache MINA, it is necessary to explicitly configure the ObjectSerializationDecoder to allow only trusted classes to prevent insecure deserialization exploits. No indication of incomplete mitigation remains after applying these updates.
Description
The most severe of these security defects could allow remote attackers to execute arbitrary code. The post Critical, High-Severity Vulnerabilities Patched in Apache MINA, HTTP Server appeared first on SecurityWeek .