Apache MINA resolveProxyClass Allow-List Bypass (CVSS 9.8)

Apache MINA 2.0.x/2.1.x branches face a CVSS 9.8 resolveProxyClass allow-list bypass; Gladys Assistant password-reset link poisoning also flagged.

2026-09-22 00:32 UTC

🔓 CVEs & KEV

CVE-2026-94301 — Apache Software Foundation Apache MINA — CVSS 9.8 — MINA 2.0.X/2.1.X Branches Vulnerable to resolveProxyClass Allow-List Bypass
CVE-2026-93340 — Gladys Assistant — CVSS 7.4 — Gladys Assistant before 5.1.0 Password Reset Link Poisoning via forgot_password En...

Start with the free Posture Self-Check to see where you stand against the current threat landscape.