cybercrime.clubhttps://cybercrime.club/tags/apache-mina/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usWed, 06 May 2026 11:12:55 -0400Apache MINA Patches CVE-2026-42778 and CVE-2026-42779: Two Incomplete Fixes Land Back-to-Back as RCEhttps://cybercrime.club/posts/apache-mina-cve-2026-42778-42779-deserialization-allowlist-bypass/Wed, 06 May 2026 11:12:55 -0400https://cybercrime.club/posts/apache-mina-cve-2026-42778-42779-deserialization-allowlist-bypass/MINA 2.2.7 and 2.1.12 ship critical patches for two deserialization bypasses that each thread the needle through a previous incomplete fix — the third and fourth iterations of the same root bug stretching back to 2024.vulnerability